CVE-2025-27222HIGH 8.6EPSS p75.3%

CVE-2025-27222CVE-2025-27222

Description

TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesn't properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to read any local server file that is accessible by the TRUfusion user and can also be used to leak cleartext passwords of TRUfusion Enterprise itself.

Scoring

CVSS 3.18.6 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS1.77% probability of exploitation · percentile 75.3% · 2026-06-18T12:00:27Z
Published2025-10-27
Last modified2025-11-03

Underlying weaknesses· 2

CWE-22CWE-35

References

  1. https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2025-27222.txt
  2. https://www.rcesecurity.com/2025/09/when-audits-fail-four-critical-pre-auth-vulnerabilities-in-trufusion-enterprise/
  3. https://www.rocketsoftware.com/products/rocket-b2b-supply-chain-integration/rocket-trufusion-enterprise

2

TypeTargetConfidenceTier
WeaknessImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')cwe-220%live
WeaknessPath Traversal: '.../...//'cwe-350%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-27224
CVE
CVE-2025-59793
CVE
CVE-2026-22557
CVE
CVE-2026-27305
CVE
CVE-2026-29205
CVE
CVE-2025-3365
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.