CVE Feed

    Dashboard / CVE / CVE-2015-4425

    CVE-2015-4425

    Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. (dot dot) in the dir parameter to admin/asset/add-asset-compatibility.

    Published:Aug 18, 2015
    Last Modified:Apr 12, 2025
    EPS:Aug 18, 2015
    EPSS Score:0.00034
    CVSS Score:4.9

    Affected Products

    Vendor
    Pimcore
    Product
    Pimcore

    Exploits

    https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-4425/https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-4425/https://www.exploit-db.com/exploits/37609

    Related CVEs

    CVE-2026-55634 (CVSS 9.9) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the …
    CVE-2026-55220 (CVSS 9.3) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimc…
    CVE-2026-44741 (CVSS 8.8) — Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. Versions prior to 2.3.6 and 1.7.18 have a SQ…
    CVE-2026-45704 (CVSS 7.1) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, CustomRepo…
    CVE-2026-44739 (CVSS 8.7) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the column…
    CVE-2026-45260 (CVSS 8.1) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, Pimcore's …
    CVE-2026-45703 (CVSS 6.4) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, the WordEx…
    CVE-2026-45162 (CVSS 8) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, multiple P…
    CVE-2026-55207 (CVSS 8.8) — Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, an unauthenti…
    CVE-2026-55208 (CVSS 7.7) — Pimcore Studio Backend Bundle is the backend bundle for Pimcore Studio. Prior to 2025.4.6 and 2026.1.6, an aut…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High