PT-2025-31821 · Kingdee+1 · Kingdee Cloud-Starry-Sky Enterprise Edition+1

Caichaoxiong · Published 2025-08-04 · Updated 2025-11-03 · CVE-2025-8516

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kingdee Cloud-Starry-Sky Enterprise Edition versions prior to 8.3

Description A security issue exists in Kingdee Cloud-Starry-Sky Enterprise Edition. The BaseServiceFactory.getFileUploadService.deleteFileAction function within the K3CloudBBCMallSiteWEB-INFlibKingdee.K3.O2O.Base.WebApp.jar!kingdeek3o2obasewebappactionFileUploadAction.class file of the IIS-K3CloudMiniApp component is affected. Manipulation of the filePath argument can lead to a path traversal condition. This issue can be exploited remotely. The exploit has been publicly disclosed and may be used.

Recommendations Install the security patch provided by the Starry Sky system, with the specific solutions being: i) Adding authentication to the vulnerable CMKAppWebHandler.ashx interface; ii) Removing the file reading function. As a short-term measure, temporarily disable external network access to the Kingdee Cloud Galaxy Retail System or set up an IP whitelist for access control.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-8516

Affected Products

Iis-K3Cloudminiapp

Kingdee Cloud-Starry-Sky Enterprise Edition

References · 10

• 🔥 https://wx.mail.qq.com/s?k=hk3Fixc6Z1cKMI9rge · Exploit
• https://vip.kingdee.com/link/s/ZgAmJ · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-8516 · Security Note
• https://vuldb.com/?id.318642 · Note
• https://t.me/CVEtracker/29093 · Telegram Post
• https://t.me/cveNotify/141289 · Telegram Post
• https://vuldb.com/?ctiid.318642 · Note
• https://twitter.com/CVEnew/status/1952396101547327546 · Twitter Post
• https://vuldb.com/?submit.573678 · Note
• https://vuldb.com/?submit.601912 · Note