CVE-2025-0226 – Tsinghua Unigroup Electronic Archives System File Download Path Information Disclosure

CVE ID : CVE-2025-0226

Published : Jan. 5, 2025, 6:15 p.m. | 1 hour, 1 minute ago

Description : A vulnerability, which was classified as problematic, has been found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this issue is the function download of the file /collect/PortV4/downLoad.html. The manipulation of the argument path leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-0226 – Tsinghua Unigroup Electronic Archives System File Download Path Information Disclosure