Open Security Issue Management Nginx Path Traversal Vulnerability

A path traversal vulnerability has been identified in Open Security Issue Management (OSIM) versions prior to 2025.9.0. The issue arises from the concatenation of $uri and $args in the Nginx configuration file, which allows attackers to manipulate query parameters and traverse directories.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files and directories on the server, potentially allowing attackers to read sensitive information or execute malicious scripts.

Remediation

Users can update to OSIM version 2025.9.0 or later, where this vulnerability has been addressed.