cvedb.io
CVE-2025-8729
MEDIUM · CVSS 6.3
EPSS exploitation probability: 0%
Published 2025-08-08T14:15:30.007 · Last modified 2026-06-17T10:07:30.597

Summary

A vulnerability has been found in MigoXLab LMeterX 1.2.0 and classified as critical. Affected by this vulnerability is the function process_cert_files of the file backend/service/upload_service.py. The manipulation of the argument task_id leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is f1b00597e293d09452aabd4fa57f3185207350e8. It is recommended to apply a patch to fix this issue.

Affected products

migoxlab — lmeterx

Does this affect you?

Add your gear to cvedb and we'll alert you only when migoxlab ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.