← Back to browse · API

CVE-2025-59304

Severity

CRITICAL

CVSS

9.8

EPSS

0.03226

Risk score

40.33

CISA KEV

No

PoC

No

Published

2025-09-17

Modified

2025-09-26

First seen

2026-08-07

Aliases

EUVD-2025-29739, GHSA-6Q94-XGM6-VJMF

Products

n/a:n/a n/a

Sources

euvd EUVD-2025-29739

Description

A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request.

References