4 matches found
CVE-2025-65878: Improper Limitation of a Pathname to a Restricted Directory
The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint /file/showImageByPath does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to th...
CVE-2025-65878
The warehouse management system version 1.2 contains an arbitrary file read vulnerability due to improper sanitization of user-controlled path parameters in the /file/showImageByPath endpoint. An attacker can exploit this directory traversal flaw to access and read arbitrary files on the server's...
CVE-2025-65878
The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint /file/showImageByPath does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to th...
CVE-2025-65878
The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint /file/showImageByPath does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to th...