CVE-2025-62356: CVE-2025-62356: dizin geçişi

Açıklama (NVD)

A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.

Özet bilgiler

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,61 (yüzdelik 50)

CWE

CWE-22

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• hiddenlayer.com
• CWE-22