CVE-2025-57403

Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the requested URL (or a portion of it) directly with a base path using os.path.join. This bypass allows directory traversal or absolute path injection, leading to the potential exposure of sensitive information.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://gist.github.com/Captaince/99b728c792c72b2666c2400625702df0	Exploit Third Party Advisory
https://github.com/AbelChe/cola_dnslog/issues/29	Exploit Issue Tracking Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:abelche:cola_dnslog:1.3.2:*:*:*:*:*:*:*

History

05 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) Cola Dnslog v1.3.2 es vulnerable a salto de directorio. Cuando se procesa una consulta DNS para un registro TXT, la aplicación concatena la URL solicitada (o una parte de ella) directamente con una ruta base utilizando os.path.join. Esta omisión permite el salto de directorio o la inyección de rutas absolutas, lo que lleva a la posible exposición de información sensible.

Information

Published : 2025-12-26 16:15

Updated : 2026-10-13 09:10

NVD link : CVE-2025-57403

Mitre link : CVE-2025-57403

CVE.ORG link : CVE-2025-57403

JSON object : View

Products Affected

abelche

cola_dnslog

CWE

CWE-23

Relative Path Traversal

{"id": "CVE-2025-57403", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-57403", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-27T15:35:06.549027Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-26T16:15:43.963", "references": [{"url": "https://gist.github.com/Captaince/99b728c792c72b2666c2400625702df0", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/AbelChe/cola_dnslog/issues/29", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-23"}]}], "descriptions": [{"lang": "en", "value": "Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the requested URL (or a portion of it) directly with a base path using os.path.join. This bypass allows directory traversal or absolute path injection, leading to the potential exposure of sensitive information."}, {"lang": "es", "value": "Cola Dnslog v1.3.2 es vulnerable a salto de directorio. Cuando se procesa una consulta DNS para un registro TXT, la aplicaci\u00f3n concatena la URL solicitada (o una parte de ella) directamente con una ruta base utilizando os.path.join. Esta omisi\u00f3n permite el salto de directorio o la inyecci\u00f3n de rutas absolutas, lo que lleva a la posible exposici\u00f3n de informaci\u00f3n sensible."}], "lastModified": "2026-10-13T09:10:00.323", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:abelche:cola_dnslog:1.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDF381CB-2528-4BEE-B2BE-54A09FDB8430"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}