CVE-2025-27224

critical · 9.8

TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application doesn't properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to write to any filename with any file type at any location on the local server, ultimately allowing execution of arbitrary code.

9.8

CVSS

0.8%

EPSS (exploit prob.)

56th

EPSS percentile

2025-10-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
rocketsoftware	trufusion_enterprise	<= 7.10.4.0

Check a specific version with /api/v1/cve/match.

References

https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2025-27224.txt
https://www.rcesecurity.com/2025/09/when-audits-fail-four-critical-pre-auth-vulnerabilities-in-trufusion-enterprise/
https://www.rocketsoftware.com/products/rocket-b2b-supply-chain-integration/rocket-trufusion-enterprise

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-27224