Description
In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xerox | FreeFlow Core | < 8.0.5 | 8.0.5 |
Advisories 1
- NCSC-2025-0262 Kwetsbaarheden verholpen in Xerox FreeFlow Core NCSC-NL (Netherlands) · Aug 14, 2025