CVE-2025-0225
CVSS 2.0 Score 4 of 10 (medium)
Details
Published Jan 5, 2025
CWE ID 23
CWE ID 25
Summary
CVE-2025-0225 is a newly disclosed vulnerability affecting Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). The issue lies in an unknown functionality of the file /setting/ClassFy/exampleDownload.html, which can be exploited through path traversal attacks. Manipulation of the argument name allows attackers to access files outside of the intended directory ('/../filedir'). This vulnerability can be exploited remotely, and the exploit has been made public, increasing the risk of widespread attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Electronic Archives System
Affected Vendors
- Tsinghua Unigroup