6.5Mittel
CVE-2025-9259Uniong｜WebITR - Arbitrary File Reading through Path Traversal
Beschreibung
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Schwachstellentyp (CWE):
CWE-36
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://www.twcert.org.tw/tw/cp-132-10328-dbc35-1.html third-party-advisoryThird Party Advisory
- https://www.twcert.org.tw/en/cp-139-10329-a1c5d-2.html third-party-advisoryThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:uniong:webitr:*:*:*:*:*:*:*:*< 2_1_0_33