CVE-2025-0973

Summary

CVE-2025-0973 is a critical vulnerability impacting CmsEasy version 7.7.7.9. The issue lies in the backAll_action function within the lib/admin/database_admin.php file, located in /index.php?case=database&act=backAll&admin_dir=admin&site=default. An attacker can exploit this path traversal vulnerability by manipulating the select[] argument, enabling them to access unintended files and potentially gain remote access. The exploit for this vulnerability has been disclosed publicly, increasing the risk for potential attacks. Despite early notification, the vendor has yet to respond.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.