CVE-2025-13875 | Yohann0617 oci-helper up to 3.2.4 OCI Configuration Upload OciServiceImpl.java addCfg File path traversal

A vulnerability was found in Yohann0617 oci-helper up to 3.2.4 and classified as critical. This issue affects the function addCfg of the file src/main/java/com/yohann/ocihelper/service/impl/OciServiceImpl.java of the component OCI Configuration Upload. Executing manipulation of the argument File can lead to path traversal.

This vulnerability is registered as CVE-2025-13875. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.