Threats Tagged 'cve-2025-35053'
View all threats tagged with 'cve-2025-35053'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-35053'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-35053 is a medium severity path traversal vulnerability in Newforma Project Center that allows authenticated users to read and delete arbitrary files with NT AUTHORITY\NetworkService privileges via the '/UserWeb/Common/MarkupServices.ashx' endpoint. Versions before 2023.1 have anonymous access enabled by default (CVE-2025-35062), enabling unauthenticated attackers to exploit this vulnerability effectively as anonymous users. The vulnerability arises from improper limitation of pathname to restricted directories (CWE-22) and improper handling of file operations (CWE-73). Exploitation does not require user interaction but does require at least authenticated or anonymous access depending on version. The CVSS 3.1 base score is 6.4, reflecting a medium severity with network attack vector, low attack complexity, low privileges required, no user interaction, and partial confidentiality and availability impact. No known exploits are currently reported in the wild. Join the discussion | CVE Database V5 | 10/09/2025, 20:20:18 UTC Added: 10/09/2025, 20:37:58 UTC |
Showing 1 to 1 of 1 result