CVE-2025-12382

High · 8.8

CVSS

8.8

EPSS

0.5%

Published

Nov 12, 2025

CISA due date

—

The record

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).

Affected packages

Ecosystem	Package	Introduced	Fixed