CVE-2025-22923
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 2, 2025
Updated: Apr 7, 2025
CWE ID 22
Summary
CVE-2025-22923 is a vulnerability affecting OS4ED openSIS versions 8.0 to 9.1. This issue enables attackers to conduct directory traversal attacks by crafting a malicious POST request to the /Modules.php endpoint. Successful exploitation allows the attacker to delete files on the targeted system, potentially leading to significant data loss or system instability. Organizations using impacted versions of openSIS are encouraged to apply the available patch to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.