Skip to content
OpenAdvisories
High · 7.2 Known exploited CVE-2025-27920 EUVD-2025-13464GHSA-66q6-24vw-2g98

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences i…

Published May 5, 2025 · Updated Oct 21, 2025 · Assigned by mitre

Description

Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences in parameters, attackers could access sensitive files outside the intended directory, potentially leading to configuration leakage or arbitrary file access.

Affected products

VendorProductAffectedFixed
Srimax Output Messenger < 2.0.63 2.0.63

References