high7.5
CVE-2025-65878
The warehouse management system version 1.2 contains an arbitrary file read vulnerability.
Impact
The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImageByPath` does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to the leakage of sensitive system information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yeqifu | Warehouse Management System | Version 1.2 |