CVE-2025-41035 | appRain CMF 4.0.5 SecurityManager download path traversal (EUVD-2025-26697)

A vulnerability, which was classified as critical, was found in appRain CMF 4.0.5. Impacted is an unknown function of the file /apprain/common/download/ of the component SecurityManager. Executing manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2025-41035. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More