CVE-2025-9257: Uniong｜WebITR - Arbitrary File Reading through Path Traversal
Published Aug 22, 2025
·Updated
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Affected Software
2 affected components
Uniong WebITR
Uniong WebITR<2_1_0_33
Remediation
Information
Update to version 2_1_0_33 or later
Event History
Aug 22, 2025
CVE Published
via MITRE·11:41 AM
Data Sourced
via MITRE·11:41 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 28, 57989
Event
via FIRST·02:37 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-9257?
CVE-2025-9257 is classified as a medium severity vulnerability due to its ability to allow unauthorized file access.
2
How do I fix CVE-2025-9257?
To fix CVE-2025-9257, implement input validation and restrict file access based on user privileges.
3
What kind of attack does CVE-2025-9257 facilitate?
CVE-2025-9257 facilitates an arbitrary file reading attack through absolute path traversal.
4
Who is affected by CVE-2025-9257?
CVE-2025-9257 affects users of the Uniong WebITR application.
5
Can CVE-2025-9257 be exploited remotely?
Yes, CVE-2025-9257 can be exploited remotely by attackers with regular user privileges.