CNNVD-202512-4006 Information

CNNVD ID

CNNVD-202512-4006

CVE-2025-15015

  • CNNVD Published: 2025-12-22

Description (Chinese)

Ragic Enterprise Cloud Database是中国立即科技(Ragic)公司的一个企业云数据库。 Ragic Enterprise Cloud Database存在安全漏洞,该漏洞源于相对路径遍历,可能导致未经身份验证的远程攻击者下载任意系统文件。

Description (English)

Rajic Enterprise Cloud Database is an enterprise cloud database of Rajic. There is a security loophole in Rajic Enterprise Cloud Database, which stems from the history of the relative path and may lead to the downloading of any system file by unidentified remote assailants.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

立即科技

Published

2025-12-22

Last Modified

2026-02-24

References

https://www.twcert.org.tw/en/cp-139-10588-771e5-2.html https://www.twcert.org.tw/tw/cp-132-10587-797c6-1.html

Patch

https://www.ragic.com/

Share on: