CNNVD-202511-2986 Information
Nov 28, 2025
cve
CNNVD ID
CNNVD-202511-2986
Related CVE
- CNNVD Published: 2025-11-28
Description (Chinese)
Uniong WebITR是中国凯发（Uniong）公司的一款在线考勤系统。 Uniong WebITR存在安全漏洞，该漏洞源于相对路径遍历，允许远程攻击者下载任意系统文件。
Description (English)
Uniong WebITR is an online attendance system of Uniong China. There is a security loophole in Uniong WebITr, which originates from a history of relative paths, allowing remote assailants to download any system file.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
凯发
Published
2025-11-28
Last Modified
2026-02-24
References
https://www.twcert.org.tw/en/cp-139-10539-21f45-2.html https://www.twcert.org.tw/tw/cp-132-10538-6a26d-1.html https://access.redhat.com/security/cve/cve-2025-13771
Patch
https://www.uniong.com.tw/public/index/
Share on: