CVE-2025-31131
Path Traversal allowing arbitrary read of files in Yeswiki
Summary
Path Traversal allowing arbitrary read of files in Yeswiki
Original description
The description as published by the source.
YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com