CVE-2025-14224 | Yottamaster DM2/DM3/DM200 up to 1.2.23/1.9.12 File Upload path traversal

A vulnerability identified as critical has been detected in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12. Affected by this issue is some unknown functionality of the component File Upload. Performing manipulation results in path traversal.

This vulnerability is known as CVE-2025-14224. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More