BaseFortify

Publication date: 2025-12-10

Last updated on: 2025-12-17

Assigner: MITRE

Description

DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-10

Last Modified

2025-12-17

Generated

2026-07-06

AI Q&A

2025-12-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-65792

Affected Vendors & Products

Vendor	Product	Version / Range
datagear	datagear	5.5.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

DataGear version 5.5.0 has a vulnerability that allows an attacker to delete arbitrary files on the system. This means that unauthorized users could potentially remove important files, leading to data loss or system instability.

Impact Analysis

This vulnerability can lead to loss of critical data or system files, potentially causing application failures, data corruption, or denial of service. It may also allow attackers to disrupt normal operations by deleting files essential for system functionality.

Hi! I’m here to help you understand CVE-2025-65792. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70