5.3
Medium
CVE-2025-8048 External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal
Description
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Flipper | 3.1.2 | No fix stated |
Other CVEs of Flipper
The 6 CVEs of Flipper →
CVE-2025-8050
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability…
5.3
Medium
CVE-2025-8052
SQL Injection vulnerability in opentext Flipper allows SQL Injection. The vulnerability could allow a low privilege…
1.0
Low
CVE-2025-8049
Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured…
2.3
Low
CVE-2025-8051
Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal. The vulnerability could allow a user…
5.3
Medium