Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2025-65878

The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint /file/showImageByPath does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to the leakage of sensitive system information.

  • Published: Dec 5, 2025
  • Updated: Dec 13, 2025
  • CVE: CVE-2025-65878
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
yeqifu / warehouse_management_system 1.2 1.2.x