Unrated severityNVD Advisory· Published Jan 9, 2026· Updated Jan 9, 2026
CVE-2025-67810
CVE-2025-67810
Description
In Area9 Rhapsode 1.47.3, an authenticated attacker can exploit the operation, url, and filename parameters via POST request to read arbitrary files from the server filesystem. Fixed in 1.47.4 (#7254) and further versions.
Affected products
2- Area9/Rhapsodedescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.