CVE-2025-53881 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	UNKNOWN				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 5.36%

Debian Releases

Debian Product

Codename

exim4

bookworm	4.96-15+deb12u10 fixed
bookworm (security)	4.96-15+deb12u10 fixed
bullseye	4.94.2-7+deb11u3 fixed
bullseye (security)	4.94.2-7+deb11u6 fixed
forky	4.99.4-2 fixed
sid	4.100~RC3-2 fixed
trixie	4.98.2-1+deb13u3 fixed
trixie (security)	4.98.2-1+deb13u4 fixed

Common Weakness Enumeration

CWE-61 - UNIX Symbolic Link (Symlink) Following
The software, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the software to operate on unauthorized files.

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-53881