CVE-2025-15227 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Trave…
High CVSS: 8.7

CVE-2025-15227

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.
Vendor
Welltend
Product
Bpmflowwebkit
CWE
CWE-36
Yayın Tarihi
2025-12-29 08:15:51
Güncelleme
2025-12-31 20:32:55
Source Identifier
twcert@cert.org.tw
KEV Date Added
-

Kategoriler

CWE-36 Bpmflowwebkit HIGH Welltend 2025

Referanslar

https://www.twcert.org.tw/en/cp-139-10605-426b6-2.html https://www.twcert.org.tw/tw/cp-132-10604-c65aa-1.html