CVE-2025-62353: CVE-2025-62353: dizin geçişi

Açıklama (NVD)

A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.

Özet bilgiler

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,65 (yüzdelik 51)

CWE

CWE-22

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• hiddenlayer.com
• CWE-22