Directory traversal vulnerability in OpenSatKit 2.2.1 allows attackers to gain access to sensitive information or delete arbitrary files via crafted value to the FileUtil_GetFileInfo function.
References
| Link | Resource |
|---|---|
| https://gist.github.com/jonafk555 | Third Party Advisory |
| https://github.com/OpenSatKit/OpenSatKit | Product |
| https://github.com/OpenSatKit/OpenSatKit/releases/tag/v2.2.1 | Release Notes |
| https://raw.githubusercontent.com/OpenSatKit/OpenSatKit/master/cfs/apps/filemgr/fsw/src/dir.c | Product |
Configurations
History
17 Feb 2026, 15:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/jonafk555 - Third Party Advisory | |
| References | () https://github.com/OpenSatKit/OpenSatKit - Product | |
| References | () https://github.com/OpenSatKit/OpenSatKit/releases/tag/v2.2.1 - Release Notes | |
| References | () https://raw.githubusercontent.com/OpenSatKit/OpenSatKit/master/cfs/apps/filemgr/fsw/src/dir.c - Product | |
| CPE | cpe:2.3:a:opensatkit:opensatkit:2.2.1:*:*:*:*:*:*:* | |
| First Time |
Opensatkit opensatkit
Opensatkit |
12 Feb 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
11 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-11 18:16
Updated : 2026-02-17 15:03
NVD link : CVE-2025-70084
Mitre link : CVE-2025-70084
CVE.ORG link : CVE-2025-70084
JSON object : View
Products Affected
opensatkit
- opensatkit
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')