Description
Tautulli v2.15.3 中的 image 端点容易受到路径遍历的攻击，允许未经身份验证的攻击者从应用程序服务器的文件系统中读取任意文件。
Tautulli /image/images 目录遍历漏洞（CVE-2025-58760）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-58760
https://github.com/Tautulli/Tautulli/security/advisories/GHSA-8g4r-8f3f-hghp
https://access.redhat.com/security/cve/cve-2025-58760
https://www.sentinelone.com/vulnerability-database/cve-2025-58760/
https://www.cve.org/CVERecord?id=CVE-2025-58760