PT-2025-12538 · Sourcecodester · Employee/Visitor Gate Pass Logging System

Happytraveller · Published 2025-03-23 · Updated 2025-03-24 · CVE-2025-2652

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Employee and Visitor Gate Pass Logging System version 1.0

Description A vulnerability has been found in the system, classified as problematic, which leads to exposure of information through directory listing. The attack can be launched remotely. Multiple sub-directories are affected.

Recommendations To resolve the issue, it is recommended to change the configuration settings.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-548

CWE-552

Related Identifiers

CVE-2025-2652

Affected Products

Employee/Visitor Gate Pass Logging System

References · 12

• 🔥 https://github.com/happytraveller-alone/cve/blob/main/dir.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-2652 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2652 · Security Note
• https://vuldb.com/?id.300667 · Note
• https://t.me/cvedetector/20904 · Telegram Post
• https://vuldb.com/?submit.519876 · Note
• https://t.me/cvenotify/115898 · Telegram Post
• https://t.me/cvetracker/19707 · Telegram Post
• https://sourcecodester.com · Note
• https://t.me/cvenotify/115830 · Telegram Post
• https://twitter.com/CVEnew/status/1903831738322960406 · Twitter Post
• https://vuldb.com/?ctiid.300667 · Note