CVE-2019-25053

HIGH

Sage FRP 1000 < 2019-11 - Unauthenticated Path Traversal via Crafted URL

Title source: llm

Description

A path traversal vulnerability exists in Sage FRP 1000 before November 2019. This allows remote unauthenticated attackers to access files outside of the web tree via a crafted URL.

References (1)

Core 1

Core References

Broken Link

https://www.on-x.com/wp-content/uploads/2023/01/on-x_-_security_advisory_-_sage_frp_1000_-_cve-2019-25053.pdf

Scores

CVSS v3 7.5

EPSS 0.0107

EPSS Percentile 60.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-22

Status published

Products (1)

sage/sage_frp_1000 < 2019-11

Published Jan 27, 2023

Tracked Since Feb 18, 2026