CVE-2025-9258Uniong｜WebITR - Arbitrary File Reading through Path Traversal

Descripción

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://www.twcert.org.tw/tw/cp-132-10328-dbc35-1.html third-party-advisoryThird Party Advisory
• https://www.twcert.org.tw/en/cp-139-10329-a1c5d-2.html third-party-advisoryThird Party Advisory