CVE-2025-30841

Published Apr 1, 2025

Last updated 3 days ago

CVSS critical 9.9

Overview

Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in adamskaat Countdown & Clock allows Remote Code Inclusion. This issue affects Countdown & Clock: from n/a through 2.8.8.
Source
audit@patchstack.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.9
Impact score
6
Exploitability score
3.1
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

audit@patchstack.com
CWE-22

Social media

Hype score
Not currently trending

  1. [CVE-2025-30841: CRITICAL] Vulnerability in Adamskaat Countdown & Clock allows Remote Code Inclusion via path traversal. Issue impacts versions from n/a to 2.8.8. Stay cyber secure.#cybersecurity,#vulnerability https://t.co/9FDKULWg20 https://t.co/I8vjbRCPoa

    @CveFindCom

    1 Apr 2025

    31 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References