CVE-2025-65878

The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImageByPath` does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to the leakage of sensitive system information.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/W000i/vuln/issues/2	Exploit Issue Tracking Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:yeqifu:warehouse_management_system:1.2:*:*:*:*:*:*:*

History

25 Sep 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) El sistema de gestión de almacenes versión 1.2 contiene una vulnerabilidad de lectura arbitraria de archivos. El endpoint '/file/showImageByPath' no sanitiza los parámetros de ruta controlados por el usuario. Un atacante podría explotar el salto de directorio para leer archivos arbitrarios en el sistema de archivos del servidor. Esto podría llevar a la fuga de información sensible del sistema.

Information

Published : 2025-12-05 17:16

Updated : 2026-09-25 23:10

NVD link : CVE-2025-65878

Mitre link : CVE-2025-65878

CVE.ORG link : CVE-2025-65878

JSON object : View

Products Affected

yeqifu

warehouse_management_system

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2025-65878", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-65878", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-05T19:22:39.774170Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-05T17:16:03.957", "references": [{"url": "https://github.com/W000i/vuln/issues/2", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImageByPath` does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to the leakage of sensitive system information."}, {"lang": "es", "value": "El sistema de gesti\u00f3n de almacenes versi\u00f3n 1.2 contiene una vulnerabilidad de lectura arbitraria de archivos. El endpoint '/file/showImageByPath' no sanitiza los par\u00e1metros de ruta controlados por el usuario. Un atacante podr\u00eda explotar el salto de directorio para leer archivos arbitrarios en el sistema de archivos del servidor. Esto podr\u00eda llevar a la fuga de informaci\u00f3n sensible del sistema."}], "lastModified": "2026-09-25T23:10:00.463", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:yeqifu:warehouse_management_system:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50384E84-B726-46D8-82A5-22A286E94294"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}