CVE-2025-0390
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 11, 2025
CWE ID 23
CWE ID 24
Summary
CVE-2025-0390 is a critical vulnerability affecting Guangzhou Huayi Intelligent Technology's Jeewms up to version 20241229. The issue lies in unknown code of the file /wmOmNoticeHController.do, which enables an attacker to execute a path traversal attack by manipulating the "../filedir" input. This vulnerability can be exploited remotely and the exploit has been made public. To mitigate this risk, upgrading to version 20250101 is recommended.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.