CNNVD-202512-1252 Information

CNNVD ID

CNNVD-202512-1252

CVE-2025-63738

  • CNNVD Published: 2025-12-09

Description (Chinese)

Xinhu RockOA是中国信呼(Xinhu)公司的一个办公OA系统。 Xinhu RockOA 2.7.0版本存在安全漏洞,该漏洞源于文件index.php中参数a的错误操作,可能导致敏感信息泄露。

Description (English)

Xinhu RockOA is an OA office system of Xinhu China. Xinhu RockOA version 2.7.0 contains a security loophole, which stems from the error of parameter a in the document index.php, which may lead to the disclosure of sensitive information.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

信呼

Published

2025-12-09

Last Modified

2026-02-24

References

https://github.com/rainrocka/xinhu/issues/11

Share on: