Beveiligingsadvies

CVE-2025-22923

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-02 00:00:00
Laatst bijgewerkt 2025-04-03 15:20:57
Toegewezen door mitre
CVSS-score 8.8
Status PUBLISHED

Beschrijving

An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile.