CVE-2025-11631: RainyGao DocSys deleteDoc.do path traversal
A vulnerability was determined in RainyGao DocSys up to 2.02.36. Affected by this vulnerability is an unknown functionality of the file /Doc/deleteDoc.do. Executing manipulation of the argument path can lead to path traversal. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11631?
CVE-2025-11631 is classified as a high-severity vulnerability due to its potential for remote exploitation and path traversal.
How do I fix CVE-2025-11631?
The fix for CVE-2025-11631 involves applying the latest security patches provided by RainyGao for DocSys version 2.02.36 or later.
Who is affected by CVE-2025-11631?
CVE-2025-11631 affects users of RainyGao DocSys up to version 2.02.36.
What type of attack can be launched using CVE-2025-11631?
An attacker can exploit CVE-2025-11631 to execute a path traversal attack, allowing unauthorized access to files.
Can CVE-2025-11631 be exploited remotely?
Yes, CVE-2025-11631 can be exploited remotely, making it crucial for users to address the vulnerability promptly.