Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 until OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.

The version of erlang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4748 advisory.

  - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP     (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with     program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1,     zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 until OTP 28.0.1,     OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.
    (CVE-2025-4748)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP     (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with     program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1,     zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 until OTP 28.0.1,     OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.
    (CVE-2025-4748)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Tenable.ad installed on the remote host is prior to 3.77.12. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2025-14 advisory.

  - Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which     makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit     this loop other than killing the thread/process. (CVE-2025-5399) 

  - Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a     network. (CVE-2025-30399)

  - libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified     as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks. (CVE-2025-4947)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7656-1 advisory.

    It was discovered that Erlang OTPs SSH module incorrectly enforced strict KEX handshake hardening     measures. A remote attacker able to intercept communications could possibly use this issue to insert     optional messages into connections during the handshake. (CVE-2025-46712)

    It was discovered that Erlang OTP incorrectly handled ZIP archives. If a user or automated system were     tricked into opening a specially crafted ZIP archive, a remote attacker could possibly use this issue to     overwrite arbitrary files outside of the intended directory. (CVE-2025-4748)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02332-1 advisory.

    - CVE-2025-4748: Fixed improper limitation of a pathname to a restricted directory vulnerability in Erlang     OTP (stdlib modules) that allowed absolute path traversal (bsc#1244642)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02331-1 advisory.

    - CVE-2025-4748: Fixed improper limitation of a pathname to a restricted directory vulnerability in Erlang     OTP (stdlib modules) that allowed absolute path traversal (bsc#1244642)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Erlang/OTP installed on the remote host is 17.0 prior to 26.2.5.13, 27.0 prior to 27.3.4.1, or 28.0 prior to 28.0.1. It is, therefore, affected by an path traversal vulnerability:

  - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP     (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with     program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1,     zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 until OTP 28.0.1,     OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4.     (CVE-2025-4748)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
244779	CBL Mariner 2.0 Security Update: erlang (CVE-2025-4748)	Nessus	MarinerOS Local Security Checks	medium
244736	Linux Distros Unpatched Vulnerability : CVE-2025-4748	Nessus	Misc.	medium
243057	Tenable.ad < 3.77.12 Multiple Vulnerabilities (TNS-2025-14)	Nessus	Misc.	high
242577	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Erlang vulnerabilities (USN-7656-1)	Nessus	Ubuntu Local Security Checks	medium
242224	SUSE SLES15 / openSUSE 15 Security Update : erlang (SUSE-SU-2025:02332-1)	Nessus	SuSE Local Security Checks	medium
242216	SUSE SLES15 / openSUSE 15 Security Update : erlang26 (SUSE-SU-2025:02331-1)	Nessus	SuSE Local Security Checks	medium
240158	Erlang/OTP 17.0 < 26.2.5.13 / 27.0 < 27.3.4.1 / 28.0 < 28.0.1 Path Traversal (CVE-2025-4748)	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-4748

medium

Tenable Plugins

medium

medium

high

medium

medium

medium

medium