CVE-2025-35053 | Newforma Project Center 2024.3 MarkupServices.ashx DownloadExportedPDF path traversal

October 9, 2025 Yanac

A vulnerability was found in Newforma Project Center 2024.3. It has been rated as critical. This vulnerability affects the function DownloadExportedPDF of the file /UserWeb/Common/MarkupServices.ashx. The manipulation leads to path traversal.

This vulnerability is listed as CVE-2025-35053. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More