CVE-2025-9259: Uniong｜WebITR - Arbitrary File Reading through Path Traversal
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9259?
CVE-2025-9259 is considered a high severity vulnerability due to its potential for arbitrary file reading and exploitation.
How do I fix CVE-2025-9259?
To fix CVE-2025-9259, ensure that your Uniong WebITR software is updated to the latest version provided by the vendor that addresses this vulnerability.
What type of attack does CVE-2025-9259 enable?
CVE-2025-9259 enables remote attackers to exploit absolute path traversal to download arbitrary system files.
Who is affected by CVE-2025-9259?
CVE-2025-9259 affects users of Uniong WebITR, particularly those with regular user privileges.
What is the cause of CVE-2025-9259?
CVE-2025-9259 is caused by inadequate validation of user-supplied input leading to path traversal vulnerabilities.