The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
Metrics
Affected Vendors & Products
References
History
Fri, 29 Aug 2025 17:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Fri, 29 Aug 2025 03:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files. | |
Title | Ai3|QbiCRMGateway - Arbitrary File Reading through Path Traversal | |
Weaknesses | CWE-23 | |
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: twcert
Published:
Updated: 2025-08-29T16:25:37.509Z
Reserved: 2025-08-29T02:40:47.216Z
Link: CVE-2025-9639

Updated: 2025-08-29T16:25:04.297Z

Status : Awaiting Analysis
Published: 2025-08-29T04:16:04.227
Modified: 2025-08-29T16:24:29.730
Link: CVE-2025-9639

No data.

No data.