What’s Vulnerable › Vulnerabilities

CVE-2025-1228: olajowon Loggrove Logfile Update page path traversal

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-12 · updated 2026-06-17
• Weakness: CWE-22

Description

A vulnerability classified as problematic has been found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected is an unknown function of the file /read/?page=1&logfile=LOG_Monitor of the component Logfile Update Handler. The manipulation of the argument path leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Affected products

• olajowon Loggrove: e428fac38cc480f011afcb1d8ce6c2bad378ddd6

References

• https://gitee.com/olajowon/loggrove/issues/IBJSXS
• https://vuldb.com/?ctiid.295218
• https://vuldb.com/?id.295218

Get alerted when CVE-2025-1228 or the next vulnerability affects your stack