CVE-2025-4530: feng_ha_ha/megagao ssm-erp/production_ssm File FileController.java handleFileDownload path traversal
First published: Sun May 11 2025(Updated: )
A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. It has been declared as problematic. Affected by this vulnerability is the function handleFileDownload of the file FileController.java of the component File Handler. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ssm-erp | ||
| ssm-erp |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-4530?
CVE-2025-4530 has been declared as a problematic vulnerability due to its impact on the File Handler component.
How do I fix CVE-2025-4530?
To fix CVE-2025-4530, review and update the FileController.java to prevent path traversal vulnerabilities.
Which products are affected by CVE-2025-4530?
CVE-2025-4530 affects the feng_ha_ha megagao ssm-erp and production_ssm applications.
What kind of vulnerability is CVE-2025-4530?
CVE-2025-4530 is a path traversal vulnerability that can lead to unauthorized file access.
What is the affected function in CVE-2025-4530?
The affected function in CVE-2025-4530 is handleFileDownload within the FileController.java file.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/feng_ha_ha
- canonical/ssm-erp