Skip to content
OpenAdvisories
High · 8.7 CVE-2025-2493 EUVD-2025-7569GHSA-8wc3-h23m-8ggr

Path Traversal vulnerability in Softdial Contact Center

Published Mar 18, 2025 · Updated Mar 18, 2025 · Assigned by INCIBE

Description

Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php’ endpoint to navigate beyond the intended directory. This can allow unauthorised access to sensitive files outside the expected scope, posing a security risk.

Affected products

VendorProductAffectedFixed
Sytel Softdial Contact Center all versions —

References