CVE-2025-0226
CVSS 2.0 Score 4 of 10 (medium)
Details
Published Jan 5, 2025
CWE ID 200
CWE ID 284
Summary
CVE-2025-0226 is a newly identified vulnerability affecting Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). This issue lies in the download function of the file /collect/PortV4/downLoad.html. If the argument path is manipulated, the system discloses sensitive information. The vulnerability can be exploited remotely, making it a significant security concern. The exploit for this vulnerability has already been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Electronic Archives System
Affected Vendors
- Tsinghua Unigroup