THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-23171 (HIGH 7.2) — The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Director does not correctly limit file upload permissions. The UI appears not to allow file uploads but uploads still succeed. In addition, the Versa Director discloses

[NVD] CVE-2025-23171 (HIGH 7.2) — The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Director does not correctly limit file upload permissions. The UI appears not to allow file uploads but uploads still succeed. In addition, the Versa Director discloses

lownvdPublished 2025-06-19

CVE-2025-23171 CVSS: 7.2 HIGH Published: 2025-06-19T00:15:21.743

The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Director does not correctly limit file upload permissions. The UI appears not to allow file uploads but uploads still succeed. In addition, the Versa Director discloses the full filename of uploaded temporary files, includ

Indicators of compromise

CVE-2025-23171cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-23171