CVE-2025-0390

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Jan 11, 2025
CWE ID 23
CWE ID 24

Summary

CVE-2025-0390 is a critical vulnerability affecting Guangzhou Huayi Intelligent Technology's Jeewms up to version 20241229. The issue lies in unknown code of the file /wmOmNoticeHController.do, which enables an attacker to execute a path traversal attack by manipulating the "../filedir" input. This vulnerability can be exploited remotely and the exploit has been made public. To mitigate this risk, upgrading to version 20250101 is recommended.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share