Path Traversal in E-Solutions E-Management

CVE-2025-3021

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.