CVE-2025-27222
HIGH
MEDIUM
Priority: 0.17
BB Relevance:
78/100
Published: 2025-10-27
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
Conf. Impact
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Changed
C:
High
I:
None
A:
None
Description
TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesn't properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to read any local server file that is accessible by the TRUfusion user and can also be used to leak cleartext passwords of TRUfusion Enterprise itself.
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| rocketsoftware | trufusion_enterprise | < 7.10.4.0 |
References & Advisories (3)
Product
Exploit
Third Party Advisory
Exploit
Third Party Advisory