CVE-2025-67810

Area9 Rhapsode 1.47.3 is affected. An authenticated attacker can exploit the operation, url, and filename parameters via a POST request to read arbitrary files from the server filesystem. The issue is fixed in version 1.47.4 (and later). The available references confirm the vulnerability is tied ...