CVE-2025-51539

The enterprise document management system EzGED3 (versions prior to 3.5.72.27183 ) is vulnerable to an unauthenticated arbitrary file read vulnerability. The root cause is improper access control and insufficient input validation in a web-exposed PHP script, which lacks secure path handling. A re...