CVE-2025-9258CWE-36

Uniong｜WebITR - Arbitrary File Reading through Path Traversal

High · published August 22, 2025

CVSS v4.0
7.1
EPSS
1%
Percentile
45.3
In the wild
Unconfirmed
What it is

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00551 · 45.3th percentile
Weakness
CWE-36 · Absolute Path Traversal
Published
2025-08-22T11:43Z
EPSS history
Timeline
  • 22 AUG 11:43Z
    Uniong｜WebITR - Arbitrary File Reading through Path Traversal
    cvelistv5