What’s Vulnerable › Vulnerabilities

CVE-2025-11034: Dibo Data Decision Making System common_dep.action.jsp downloadImpTemplet path traversal

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-26 · updated 2026-10-09
• Weakness: CWE-22

Description

A vulnerability was found in Dibo Data Decision Making System up to 2.7.0. The affected element is the function downloadImpTemplet of the file /common/dep/common_dep.action.jsp. The manipulation of the argument filePath results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Affected products

• Dibo Data Decision Making System: 2.0, 2.1, 2.2, 2.3, 2.4, 2.5 (+2)

References

• https://github.com/FightingLzn9/vul/blob/main/%E8%BF%AA%E5%8D%9A%E6%95%B0%E6%8D%AE%E5%86%B3%E7%AD%96%E7%B3%BB%E7%BB%9F.md
• https://vuldb.com/?ctiid.325981
• https://vuldb.com/?id.325981
• https://vuldb.com/?submit.658242

Get alerted when CVE-2025-11034 or the next vulnerability affects your stack