PT-2025-34343 · Uniong · Webitr

Linwz · Publicado 2025-08-22 · Atualizado 2025-09-23 · CVE-2025-9256

Positive Technologies (AI Summary)

CVSS v4.0

7.1

Alta

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: WebITR versions (affected versions not specified)

Description: WebITR developed by Uniong is susceptible to an arbitrary file reading issue. This allows remote attackers with regular privileges to exploit an Absolute Path Traversal flaw to download arbitrary system files.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-36

Identificadores relacionados

CVE-2025-9256

Produtos afetados

Webitr

Referências · 8

• https://twitter.com/VulmonFeeds/status/1958880723332395452 · Publicação no Twitter
• https://t.me/cveNotify/136202 · Publicação no Telegram
• https://twcert.org.tw/en/cp-139-10329-a1c5d-2.html · Nota
• https://t.me/CVEtracker/30667 · Publicação no Telegram
• https://twcert.org.tw/tw/cp-132-10328-dbc35-1.html · Nota
• https://osv.dev/vulnerability/CVE-2025-9256 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1958859315055665407 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-9256 · Nota de Segurança