high7.5
CVE-2025-40662
Absolute path disclosure vulnerability in DM Corporative CMS.
Impact
Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acc | Dm Corporative Cms | before 2025.01 |