CVE-2025-8356: Path Traversal leading to RCE
Published Aug 8, 2025
·Updated
In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.
Affected Software
2 affected components
Xerox FreeFlow Core
Xerox FreeFlow Core=8.0.4
Event History
Aug 8, 2025
CVE Published
via MITRE·03:40 PM
Data Sourced
via MITRE·03:40 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 17, 57603
Event
via FIRST·02:55 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-8356?
CVE-2025-8356 is rated as high severity due to its potential for Remote Code Execution.
2
How do I fix CVE-2025-8356?
To fix CVE-2025-8356, upgrade to Xerox FreeFlow Core version 8.0.5 or later.
3
What type of attack does CVE-2025-8356 involve?
CVE-2025-8356 involves a Path Traversal attack that allows unauthorized file access on the server.
4
What can be the consequence of exploiting CVE-2025-8356?
Exploiting CVE-2025-8356 can lead to Remote Code Execution, enabling attackers to run arbitrary commands.
5
Which versions of Xerox FreeFlow Core are affected by CVE-2025-8356?
CVE-2025-8356 affects Xerox FreeFlow Core version 8.0.4 and earlier.