Vulnerability Description
TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesn't properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to read any local server file that is accessible by the TRUfusion user and can also be used to leak cleartext passwords of TRUfusion Enterprise itself.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rocketsoftware | Trufusion Enterprise | <= 7.10.4.0 |
Related Weaknesses (CWE)
References
- https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2025-27222.txtExploitThird Party Advisory
- https://www.rcesecurity.com/2025/09/when-audits-fail-four-critical-pre-auth-vulnExploitThird Party Advisory
- https://www.rocketsoftware.com/products/rocket-b2b-supply-chain-integration/rockProduct
FAQ
What is CVE-2025-27222?
CVE-2025-27222 is a vulnerability with a CVSS score of 8.6 (HIGH). TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesn't properly sanitize the input to this endpoint, ultimately ...
How severe is CVE-2025-27222?
CVE-2025-27222 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-27222?
Check the references section above for vendor advisories and patch information. Affected products include: Rocketsoftware Trufusion Enterprise.