CNNVD-202510-810 Information

CNNVD ID

CNNVD-202510-810

CVE-2025-11337

  • CNNVD Published: 2025-10-06

Description (Chinese)

Four-Faith Water Conservancy Informatization Platform是中国四信(Four-Faith)公司的一个水利信息化系统。 Four-Faith Water Conservancy Informatization Platform 2.2及之前版本存在路径遍历漏洞,该漏洞源于对参数fileName的错误操作,可能导致路径遍历攻击。

Description (English)

Four-Faith Water Services Information Platformation Platform is a hydro-information system of Four-Faith China. Four-Faith Water Services Information Platform 2.2 and previous versions have path-to-path loopholes that stem from an error in the file name of the parameter, which may lead to a path-to-path attack.

Hazard Level

High

Vulnerability Type

路径遍历

Affected Vendor

四信

Published

2025-10-06

Last Modified

2026-02-24

References

https://github.com/jiangfeng13/CVE/issues/1 https://vuldb.com/?ctiid.327220 https://vuldb.com/?id.327220 https://vuldb.com/?submit.664615

Share on: