TESI vulnerabilities

🔔 Create alert RSS

Published CVEs affecting TESI products: 1 record(s), with severity, exploitation and fixes.

Gandia Integra Total 1

Exploited only (KEV) →

CVE-2025-41073 Medium · 6.5 CWE-22 Oct 23, 2025

Path Traversal in Gandia Integra Total by TESI

Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories (e.g., ..\..\..), by exploiting the “direstudio” parameter in “/encuestas/integraweb[_v4]/integra/html/view/comprimir.php”.