CVE-2025-0202

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 4, 2025
Updated: Jan 22, 2025
CWE ID 73

Summary

CVE-2025-0202 is a recently identified vulnerability in TCS BaNCS 10. The issue lies within the /REPORTS/REPORTS_SHOW_FILE.jsp file, where the argument FilePath is susceptible to manipulation. If exploited, this vulnerability may lead to file inclusion. However, the authenticity of this vulnerability is currently under debate.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share