CVE-2025-65878: Path Traversal
The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint /file/showImageByPath does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to the leakage of sensitive system information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65878?
CVE-2025-65878 is considered a high severity vulnerability due to the potential for arbitrary file reading, which can lead to sensitive data exposure.
How do I fix CVE-2025-65878?
To fix CVE-2025-65878, ensure that proper input validation and sanitization are implemented for the path parameters in the endpoint `/file/showImageByPath`.
What systems are affected by CVE-2025-65878?
CVE-2025-65878 affects version 1.2 of the Warehouse Management System developed by Yeqifu.
What could an attacker do by exploiting CVE-2025-65878?
An attacker could exploit CVE-2025-65878 to perform directory traversal attacks, allowing them to read arbitrary files on the server's file system.
Is there a patch available for CVE-2025-65878?
As of now, specific patch details for CVE-2025-65878 should be checked with the software vendor Yeqifu for any available updates.