Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/10/13 8:27 a.m.•19 views

CVE-2025-11630

A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...

6.5CVSS6.6AI score0.00718EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/12 9:30 a.m.•15 views

EUVD-2025-33885

A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...

6.5CVSS6.2AI score0.00718EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/12 8:15 a.m.•15 views

CVE-2025-11630

A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...

9.8CVSS5.4AI score0.00718EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/12 8:15 a.m.•14 views

CVE-2025-11630

A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...

9.8CVSS0.00718EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/12 7:32 a.m.•7 views

CVE-2025-11630 RainyGao DocSys File Upload uploadDoc.do updateRealDoc path traversal

A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...

6.5CVSS6.1AI score0.00718EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/12 7:32 a.m.•48 views

CVE-2025-11630

RainyGao DocSys (versions up to 2.02.36) is affected by a path traversal in the File Upload component. The vulnerability is in the function updateRealDoc within /Doc/uploadDoc.do, triggered by manipulating the path parameter. It is remotely exploitable and the exploit is public. Several sources c...

9.8CVSS6.1AI score0.00718EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/12 12:00 a.m.•0 views

CVE-2025-11630: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...

9.8CVSS5.2AI score0.00718EPSS
SaveExploits1References1
Rows per page
Query Builder