7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.
Basic Information
ID
CVE-2025-8912
Source
twcert
Published
Aug 13, 2025 at 09:13
Affected Product
Vendor
WellChoose
Product
Organization Portal System
Affected Versions
WellChoose Organization Portal System 0