PT-2026-1883 · Area9 · Area9 Rhapsode

CVE-2025-67810

·

Publicado

2026-01-09

·

Atualizado

2026-02-10

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Area9 Rhapsode versions prior to 1.47.4
Description An authenticated attacker can exploit the operation, url, and filename parameters via a POST request to read arbitrary files from the server filesystem. The affected parameters are used in a POST request.
Recommendations Update to version 1.47.4 or later.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2025-67810

Produtos afetados

Area9 Rhapsode