CVE-2025-27445

A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient sanitization of user-supplied input in file path parameters, allowing attackers to exploit directory traversal sequences (e.g., ../) to access sensitive files

• CWE-35

• https://rsjoomla.com/

Published

Jun 5, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-2744A vulnerability, which was classified as critical, was found…5.4
• CVE-2025-27440Heap overflow in some Zoom Workplace Apps may allow an authe…8.8
• CVE-2025-27441Cross site scripting in some Zoom Workplace Apps may allow a…5.2
• CVE-2025-27442Cross site scripting in some Zoom Workplace Apps may allow a…5.2
• CVE-2025-27443Insecure default variable initialization in some Zoom Workpl…5.5
• CVE-2025-27444A reflected XSS vulnerability in RSform!Pro component 3.0.0 …4.8
• CVE-2025-27446Incorrect Permission Assignment for Critical Resource vulner…7.8
• CVE-2025-27447The web application is susceptible to cross-site-scripting a…6.1
• CVE-2025-27448The web application is susceptible to cross-site-scripting a…5.4
• CVE-2025-27449The MEAC300-FNADE4 does not implement sufficient measures to…9.8
• CVE-2025-2745A cross-site scripting vulnerability exists in AVEVA PI Web …6.5
• CVE-2025-27450The Secure attribute is missing on multiple cookies provided…6.5