CVE-2025-13698

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-13698

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-13698.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-13698

Published

2025-12-23T21:40:13.580Z

Modified

2026-07-15T01:48:59.873543234Z

Severity

4.5 (Medium) CVSS_V3 - CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability

Details

Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Deciso OPNsense. Authentication is required to exploit this vulnerability.

The specific flaw exists within the handling of backup configuration files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create files in the context of root. Was ZDI-CAN-28133.

Database specific

{
    "cna_assigner": "zdi",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/13xxx/CVE-2025-13698.json",
    "cwe_ids": [
        "CWE-22"
    ]
}

References

Affected packages

Git / github.com/opnsense/core

Affected ranges

Type

GIT

Repo

https://github.com/opnsense/core

Events

Introduced

86307df35e3ef63f97aa3a5c395435d0899092c7

Fixed

cb15c935137d05c86a1e6cf12af877e9c32a23af

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "25.7"
        },
        {
            "last_affected": "25.7"
        }
    ]
}

Affected versions

25.*

25.7

25.7.r

26.*

26.1.a

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-13698.json"