CVE-2025-9256: Uniong｜WebITR - Arbitrary File Reading through Path Traversal
Published Aug 22, 2025
·Updated
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Affected Software
2 affected components
Uniong WebITR
Uniong WebITR<2_1_0_33
Remediation
Information
Update to version 2_1_0_33 or later
Event History
Aug 22, 2025
CVE Published
via MITRE·11:34 AM
Data Sourced
via MITRE·11:34 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 27, 57989
Event
via FIRST·09:25 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-9256?
CVE-2025-9256 has been rated as a high severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2025-9256?
To fix CVE-2025-9256, it is recommended to update Uniong WebITR to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2025-9256?
CVE-2025-9256 affects users of the Uniong WebITR software that have not patched against the arbitrary file reading vulnerability.
4
What type of vulnerability is CVE-2025-9256?
CVE-2025-9256 is classified as an Arbitrary File Reading vulnerability caused by Absolute Path Traversal.
5
Can CVE-2025-9256 be exploited remotely?
Yes, CVE-2025-9256 can be exploited remotely by attackers with regular privileges.