High severity7.5NVD Advisory· Published Dec 5, 2025· Updated Jun 17, 2026
CVE-2025-65878
CVE-2025-65878
Description
The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint /file/showImageByPath does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the server's file system. This could lead to the leakage of sensitive system information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:yeqifu:warehouse_management_system:1.2:*:*:*:*:*:*:*
- warehouse management system/warehouse management systemdescription
Patches
Vulnerability mechanics
References
1- github.com/W000i/vuln/issues/2nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.