PT-2025-11640 · Imfaq · Imfaq

Published 2025-03-18 · Updated 2025-03-19 · CVE-2025-29930

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions imFAQ versions prior to 1.0.1

Description The issue allows an attacker to read sensitive files on the server through Local File Inclusion (LFI) by manipulating the seoOp parameter in the $ GET request. The seoOp and seoArg parameters are used directly without sanitization or validation. However, the risk is partly mitigated because ImpressCMS stores sensitive files outside the web root in a folder with a randomized name.

Recommendations For versions prior to 1.0.1, update to version 1.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the seoOp and seoArg parameters to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2025-29930

GHSA-VRR3-54VC-VWG3

Affected Products

Imfaq

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/29xxx/CVE-2025-29930.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-29930 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-29930 · Security Note
• https://github.com/ImpressModules/imfaq/commit/63dedd30a8f196db7b340740adf667a39c26a4ac · Note
• https://github.com/ImpressModules/imfaq/security/advisories/GHSA-vrr3-54vc-vwg3 · Note
• https://twitter.com/chux13786509/status/1902420521758945771 · Twitter Post
• https://t.me/cvetracker/19402 · Telegram Post
• https://t.me/cvedetector/20601 · Telegram Post
• https://twitter.com/CVEnew/status/1902075679086141921 · Twitter Post