CVE-2025-68002
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open User Map: from n...
Affects 0 products across 1 vendor.
Attacker manipulates file path inputs to access files outside the intended directory.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A Path Traversal vulnerability exists in 100plugins Open User Map versions up to 1.4.16, allowing attackers to access files outside the intended directory.
BSID: BS-2026-GLOBAL-029708-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-68002?
What is the CVSS score for CVE-2025-68002?
Is CVE-2025-68002 actively exploited?
How do I remediate CVE-2025-68002?
What systems are affected by CVE-2025-68002?
| CVE ID | CVE-2025-68002 |
|---|---|
| BSID | BS-2026-GLOBAL-029708-M BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| Published | 2026-02-20 |
| Last Modified | 2026-04-15 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open User Map: from n/a through <= 1.4.16.
Source: NIST NVD / MITRE CVE Database
An attacker can exploit this vulnerability by manipulating file paths in requests to the application, potentially leading to unauthorized access to sensitive files on the server.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| 100Plugins | — | — |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 3f88ab340725c92868bb11ec9e05cbbc34e6588693dfd1b93b05cbb88136c7b2763331b9a22102681a0b67b159efb65758e1bd29044837b22a48193164fd0d9e |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →