Skip to content
OpenAdvisories
High · 7.6 CVE-2025-67442 EUVD-2025-204572GHSA-36x3-32q8-65fc

EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This in…

Published Dec 19, 2025 · Updated Dec 19, 2025 · Assigned by mitre

Description

EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users.

References