GHSA-824x-88xg-cwrv
NoneCVSS
—
EPSS
—
Published
Jan 5, 2026
CISA due date
—
The record
Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | redaxo/source | 0 | 5.20.2 |
Related vulnerabilities
- CVE-2026-21857 Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read Same vulnerability
- GHSA-x6vr-q3vf-vqgq REDAXO CMS is vulnerable to Reflected XSS in Mediapool Info Banner via args[types] Also affects redaxo/source
- GHSA-vqc7-7fj4-3fm3 REDAXO CMS is vulnerable to XSS through its module management component Also affects redaxo/source
- GHSA-xj9j-gjxg-7jvq REDAXO CMS is vulnerable to RCE attack through its template management component Also affects redaxo/source
- CVE-2025-64050 REDAXO CMS is vulnerable to RCE attack through its template management component Also affects redaxo/source
- CVE-2025-64049 REDAXO CMS is vulnerable to XSS through its module management component Also affects redaxo/source
- CVE-2025-66026 REDAXO CMS is vulnerable to Reflected XSS in Mediapool Info Banner via args[types] Also affects redaxo/source
- CVE-2026-81163 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… CWE-22