CVE-2025-9258: Uniong｜WebITR - Arbitrary File Reading through Path Traversal
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9258?
CVE-2025-9258 is considered to have a high severity due to its potential for arbitrary file reading and system file exposure.
How do I fix CVE-2025-9258?
To mitigate CVE-2025-9258, apply the latest security patches from Uniong for the WebITR application.
What type of vulnerability is CVE-2025-9258?
CVE-2025-9258 is classified as an Arbitrary File Reading vulnerability exploiting Absolute Path Traversal.
Who is affected by CVE-2025-9258?
Uniong WebITR users are affected by CVE-2025-9258, allowing attackers to exploit the vulnerability with regular privileges.
Can CVE-2025-9258 be exploited remotely?
Yes, CVE-2025-9258 can be exploited remotely by attackers, granting them access to download arbitrary system files.