CVE-2025-31131

Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.5.2

Description The issue concerns a path traversal vulnerability in the squelette parameter, allowing unauthorized access to server files. This enables read access to arbitrary files on the server.

Recommendations For versions prior to 4.5.2, update to version 4.5.2 to fix this security flaw. As a temporary workaround, consider restricting access to the squelette parameter to minimize the risk of exploitation.