CVE-2025-10709

CVE-2025-10709 affects Four-Faith Water Conservancy Informatization Platform 1.0. The vulnerability resides in path traversal via the fileName parameter in the files /history/historyDownload.do, /otheruserLogin.do, and /getfile. It can be exploited remotely, and public exploitation information ex...

CVE-2025-10709 Four-Faith Water Conservancy Informatization Platform historyDownload.do;otheruserLogin.do;getfile path traversal

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this issue is some unknown functionality of the file /history/historyDownload.do;otheruserLogin.do;getfile. The manipulation of the argument fileName results in path traversal. The attack can be...