CVE-2025-13771: Uniong｜WebITR - Arbitrary File Read
WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Uniong WebITRto a version that resolves this vulnerability.Fixed in 2_1_0_34
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13771?
CVE-2025-13771 is considered a high severity vulnerability due to its ability to allow unauthorized access to sensitive files.
How do I fix CVE-2025-13771?
To mitigate CVE-2025-13771, restrict user input and implement proper access controls to prevent relative path traversal.
Who is affected by CVE-2025-13771?
CVE-2025-13771 affects users of Uniong WebITR software that have not applied the necessary security patches.
What is the impact of CVE-2025-13771?
The impact of CVE-2025-13771 includes potential unauthorized access to sensitive system files, which can lead to data breaches.
Is there a workaround for CVE-2025-13771?
While no official workaround is provided for CVE-2025-13771, minimizing user privileges and validating file access may help reduce risks.