CVE-2025-31131
Path Traversal allowing arbitrary read of files in Yeswiki
Résumé
Path Traversal allowing arbitrary read of files in Yeswiki
Description d'origine
La description telle que publiée par la source (souvent en anglais).
YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This vulnerability is fixed in 4.5.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com