CVE-2025-8048

EUVD-2025-35107
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file
path and then download the specified file from the system by requesting the
stored document ID.







This issue affects Flipper: 3.1.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Affected Products (NVD)
VendorProductVersion
opentextflipper
3.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850531