CVE-2025-8048: Opentext Flipper

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2.

Affected products

• Opentext Flipper: version 3.1.2 only

Published 2025-10-20. Last modified 2026-10-08.