Vulnerabilities (CVE)

Filtered by vendor Phillipsdata Subscribe
Filtered by product Blesta
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-25859 1 Phillipsdata 1 Blesta 2025-05-13 N/A 7.1 HIGH
A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover user accounts and execute arbitrary code.