HIGH
Uniong｜WebITR - Arbitrary File Reading through Path Traversal
Published Aug 22, 2025
7.1
HIGHCVSS 4.0
EPSS 0.55%
Description
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Affected products
-
Affected
- ≥ 0, ≤ 2_1_0_32
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update to version 2_1_0_33 or later
Weaknesses (1)
References (3)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25509 Advisory
- https://www.twcert.org.tw/en/cp-139-10329-a1c5d-2.html third-party-advisoryThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-10328-dbc35-1.html third-party-advisoryThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25509 | Advisory | |
| https://www.twcert.org.tw/en/cp-139-10329-a1c5d-2.html | third-party-advisoryThird Party Advisory | |
| https://www.twcert.org.tw/tw/cp-132-10328-dbc35-1.html | third-party-advisoryThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner twcert
Published Aug 22, 2025
Updated Aug 22, 2025
Reserved Aug 20, 2025
Link CVE-2025-9256
CISA Vulnrichment
Updated Aug 22, 2025
Red Hat
No data
GitHub
No data