CVE-2026-125753 | ABP Framework prior 10.6.2/10.7.0 {name} DefaultBlobFilePathCalculator name path traversal

SecurityVulns
Yanac

A vulnerability described as problematic has been identified in ABP Framework. This vulnerability affects the function DefaultBlobFilePathCalculator of the file /api/blogging/files/{name}. The manipulation of the argument Name results in path traversal.

This vulnerability was named CVE-2026-125753. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More