CVE-2025-1743
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Feb 27, 2025
CWE ID 22
Summary
CVE-2025-1743 is a critical vulnerability affecting zyx0814 Pichome 2.1.0. The issue lies within the /index.php?mod=textviewer component, specifically the src argument. An attacker can manipulate this argument to initiate a path traversal, enabling them to navigate and access unintended files. This vulnerability can be exploited remotely, making it a significant security concern. Public disclosure of the exploit increases the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.