CVE-2014-125080: frontaccounting faplanet path traversal

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-16 · updated 2026-06-17
Weakness: CWE-22

Description

A vulnerability has been found in frontaccounting faplanet and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. The patch is identified as a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50. It is recommended to apply a patch to fix this issue. VDB-218398 is the identifier assigned to this vulnerability.

Affected products

frontaccounting faplanet: before 2014-05-21 — fixed in 2014-05-21

How to fix

Upgrade to a fixed version: frontaccounting faplanet 2014-05-21. Check the vendor advisory for mitigations.

References

https://github.com/frontaccounting/faplanet/commit/a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50
https://vuldb.com/?ctiid.218398
https://vuldb.com/?id.218398
https://github.com/frontaccounting/faplanet/commit/a5dcd87f46080a624b1a9ad4b0dd035bbd24ac50
https://vuldb.com/?ctiid.218398
https://vuldb.com/?id.218398

Get alerted when CVE-2014-125080 or the next vulnerability affects your stack