CVE-2014-2575

CVE-2014-2575 is a directory traversal vulnerability affecting the File Manager component of DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC versions prior to 13.1.10 and 13.2.9. This flaw allows authenticated attackers to read or write arbitrary files by manipulating the __EVENTARGUMENT parameter with a dot-dot sequence. With a CVSS score of 6.5 (medium severity), it presents a moderate risk due to its network-based attack vector and potential for partial confidentiality, integrity, and availability impact. While not on the KEV catalog, an ExploitDB entry (EDB-33700) confirms exploit code availability, though there is no evidence of active exploitation or significant community discussion.