CNNVD-202510-328 Information
Oct 02, 2025
cve
CNNVD ID
CNNVD-202510-328
Related CVE
- CNNVD Published: 2025-10-02
Description (Chinese)
AndSoft e-TMS是西班牙AndSoft公司的一款物流管理软件。 AndSoft e-TMS 25.03版本存在路径遍历漏洞，该漏洞源于docurl参数容易受到路径遍历攻击，可能导致访问web根目录内文件。
Description (English)
AndSoft e-TMS is a logistics management software for AndSoft in Spain. AndSoft e-TMS 25.03 has a loophole in the path, which stems from the fact that the docurl parameter is vulnerable to routing, which may lead to access to the documents in the web root directory.
Hazard Level
Medium
Vulnerability Type
路径遍历
Affected Vendor
AndSoft
Published
2025-10-02
Last Modified
2026-02-24
References
Patch
https://andsoft.es/es/solucio-1/menu-1/caracteristicas.html
Share on: