CNNVD-202511-1760 Information

CNNVD ID

CNNVD-202511-1760

CVE-2025-13161

  • CNNVD Published: 2025-11-14

Description (Chinese)

IQ Service IQ-Support是中国台湾IQ Service公司的一个智慧客服系统。 IQ Service IQ-Support存在安全漏洞,该漏洞源于相对路径遍历,可能导致未经验证的远程攻击者下载任意系统文件。

Description (English)

IQ Service IQ-Support is a smart customer service system for IQ Service. IQ Service IQ-Support has a security loophole, which stems from a history of relative paths, which may lead uncertified remote assailants to download any system file.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

IQ Service

Published

2025-11-14

Last Modified

2026-02-24

References

https://www.twcert.org.tw/en/cp-139-10502-11c6d-2.html https://www.twcert.org.tw/tw/cp-132-10501-a25a6-1.html

Patch

https://iqinternational.org/support

Share on: