Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-8048 EUVD-2025-35107GHSA-77vp-2488-vmf6

External Control of File path vulnerability has been discovered on Openext Flipper.

Published Oct 20, 2025 · Updated Oct 20, 2025 · Assigned by OpenText

Description

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file
path and then download the specified file from the system by requesting the
stored document ID.

This issue affects Flipper: 3.1.2.

Affected products

VendorProductAffectedFixed
opentext Flipper 3.1.2 —

References