VDB
CVE-2025-49466
CVE-2025-49466
PUBLISHED
CVSS 5.800000190734863 MEDIUM
aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,
EPSS 0.59% · 48.1th percentile
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
EPSS Score
0.59%
48.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| rjarry | aerc | 0 |
Timeline
- Jun 5, 2025 CVE Published
- Jun 5, 2025 EPSS Score
- Jun 5, 2025 PoC Published
- Jun 5, 2025 CVE Updated
- Jun 17, 2025 EPSS Score
- Jun 28, 2025 EPSS Score
- Jul 10, 2025 EPSS Score
- Jul 21, 2025 EPSS Score
- Aug 2, 2025 EPSS Score
- Aug 14, 2025 EPSS Score
- Aug 25, 2025 EPSS Score
- Sep 18, 2025 EPSS Score