CVE-2019-25352Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Attackers can use multiple '../' sequences to navigate outside the web root and retrieve sensitive configuration files like Windows system files.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-02-18); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

RedPacket Security@RedPacketSec233d
Disclosure
CVE Alert: CVE-2019-25352 - Genivia Inc. - Crystal Live HTTP Server - https://www.redpacketsecurity.com/cve-alert-cve-2019-25352-genivia-inc-crystal-live-http-server/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25352 #genivia-inc #crystal-live-http-server
Post summary
A CVE alert has been issued for CVE‑2019‑25352 affecting Genivia Inc.'s Crystal Live HTTP Server, but the post offers no further technical or remediation details.
00010121
3.5K followersView on X
CVE@CVEnew233d
Disclosure
CVE-2019-25352 Crystal Live HTTP Server 6.01 contains a directory traversal vulnerability that allows remote attackers to access system files by manipulating URL path segments. Atta… https://www.cve.org/CVERecord?id=CVE-2019-25352
Post summary
The text discloses that CVE-2019-25352 is a directory traversal flaw in Crystal Live HTTP Server allowing remote attackers to read system files via crafted URLs.
00000135
56.4K followersView on X

Explore more

Back to dashboard