Description
A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.
Published: 2025-07-16
Score: 8.7 High
EPSS: 2.5% Low
KEV: No
Impact: Remote File Disclosure
Action: Patch
AI Analysis

Impact

A path traversal flaw in RIPS Scanner 0.54 permits remote attackers to retrieve any file readable by the web server via crafted HTTP GET requests to the windows/code.php script with a manipulated file parameter. The vulnerability can lead to the disclosure of sensitive data without requiring authentication, exploiting a classic directory‑traversal weakness identified as CWE‑22.

Affected Systems

Affected is RIPS Technologies RIPS Scanner version 0.54.

Risk and Exploitability

The CVSS score of 8.7 labels the flaw as high severity, while the EPSS score of 1% indicates a very low likelihood that the vulnerability will be targeted in the wild. The bug is not listed in the CISA KEV catalog. Exploitation is achieved remotely over HTTP by submitting a malicious request to the windows/code.php endpoint; no additional conditions are specified, making the attack straightforward for anyone with network access to the vulnerable instance.

Generated by OpenCVE AI on June 18, 2026 at 06:29 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to the latest RIPS Scanner release that contains the path traversal fix.
  • If an upgrade cannot be performed immediately, restrict or block unauthenticated access to the windows/code.php endpoint using web‑server or firewall rules.
  • Configure the web application firewall or the application itself to reject file parameters containing traversal sequences such as "../" or other directory‑traversal patterns.
  • Continuously monitor web server logs for suspicious requests to windows/code.php and investigate any attempts to read sensitive files.

Generated by OpenCVE AI on June 18, 2026 at 06:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-21745 A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.
History

Thu, 17 Jul 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 16 Jul 2025 21:30:00 +0000

Type Values Removed Values Added
Description A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.
Title RIPS Scanner v0.54 Path Traversal
Weaknesses CWE-22
References
Metrics cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-07-14T22:25:45.506Z

Reserved: 2025-04-15T19:15:22.561Z

Link: CVE-2025-34126

cve-icon Vulnrichment

Updated: 2025-07-17T15:27:18.350Z

cve-icon NVD

Status : Deferred

Published: 2025-07-16T22:15:24.143

Modified: 2026-07-14T23:17:20.580

Link: CVE-2025-34126

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-18T06:30:16Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')