Dibo vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dibo products: 1 record(s), with severity, exploitation and fixes.

Data Decision Making System 1

Exploited only (KEV) →

CVE-2025-11034 Medium · 4.3 CWE-22 Sep 26, 2025

Dibo Data Decision Making System common_dep.action.jsp downloadImpTemplet path traversal

A vulnerability was found in Dibo Data Decision Making System up to 2.7.0. The affected element is the function downloadImpTemplet of the file /common/dep/common_dep.action.jsp. The manipulation of the argument filePath results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.