deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-52920
Published: 2025-06-23
Description: Innoshop through 0.4.1 allows Insecure Direct Object Reference (IDOR) at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products on the website. To be specific, an attacker could view the order details of any order by browsing to /en/account/orders/_ORDER_ID_ or use the address and billing information of other customers by manipulating the shipping_address_id and billing_address_id parameters when making an order (this information is then reflected in the receipt). Additionally, an attacker could delete the reviews of other users by sending a DELETE request to /en/account/reviews/_REVIEW_ID.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-425
References: https://github.com/innocommerce/innoshop; https://medium.com/@The_Hiker/how-i-found-multiple-cves-in-innoshop-0-4-1-12c8f84ad87f
CVE: CVE-2025-52921
Published: 2025-06-23
Description: In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php extension by using the Rename Function. This bypasses the initial check that uploaded files are image files. The application relies on frontend checks to restrict the administrator from changing the extension of uploaded files to .php. This restriction is easily bypassed with any proxy tool (e.g., BurpSuite). Once the attacker renames the file, and gives it the .php extension, a GET request can be used to trigger the execution of code on the server.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-420
References: https://github.com/innocommerce/innoshop; https://medium.com/@The_Hiker/how-i-found-multiple-cves-in-innoshop-0-4-1-12c8f84ad87f
CVE: CVE-2025-52922
Published: 2025-06-23
Description: Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated attacker with access to the admin panel could abuse this to: (1) fully map the filesystem structure via the /api/file_manager/files?base_folder= endpoint, (2) create arbitrary directories on the server via the /api/file_manager/directories endpoint, (3) read arbitrary files from the server by copying the file to a readable location within the application via the /api/file_manager/copy_files endpoint, {4) delete arbitrary files from the server via a DELETE request to /api/file_manager/files, or (5) create arbitrary files on the server by uploading them and then leveraging the /api/file_manager/move_files endpoint to move them anywhere in the filesystem.
CVSS Score: 7.4 (HIGH)
CWE: CWE-23
References: https://github.com/innocommerce/innoshop; https://medium.com/@The_Hiker/how-i-found-multiple-cves-in-innoshop-0-4-1-12c8f84ad87f
CVE: CVE-2025-6512
Published: 2025-06-23
Description: On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94
References: https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0004.pdf
CVE: CVE-2025-6513
Published: 2025-06-23
Description: Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-260
References: https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0003.pdf
CVE: CVE-2025-2171
Published: 2025-06-23
Description: Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute force guess the 6-digit password reset PIN
CWE: CWE-307
References: https://cloud.google.com/blog/topics/threat-intelligence/remote-code-execution-aviatrix-controller; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0003.md
CVE: CVE-2025-2172
Published: 2025-06-23
Description: Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames
CWE: CWE-78
References: https://cloud.google.com/blog/topics/threat-intelligence/remote-code-execution-aviatrix-controller; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0004.md
CVE: CVE-2025-52542
Published: 2025-06-23
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2023-47297
Published: 2025-06-23
Description: A settings manipulation vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands, including editing system security auditing configurations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://drive.google.com/file/d/1YzoJ2QuI9LEEpF8r5ZiCdTQtR9hfsXl7/view?usp=sharing; https://github.com/pwahba/cve-research/blob/main/CVE-2023-47297/CVE-2023-47297.md
CVE: CVE-2023-47298
Published: 2025-06-23
Description: An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://drive.google.com/file/d/1-BDd0ycuYhuxo-lg4th-Cswimoqqzkot/view?usp=sharing; https://github.com/pwahba/cve-research/blob/main/CVE-2023-47298/CVE-2023-47298.md
CVE: CVE-2023-48978
Published: 2025-06-23
Description: An issue in NCR ITM Web terminal v.4.4.0 and v.4.4.4 allows a remote attacker to execute arbitrary code via a crafted script to the IP camera URL component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://drive.google.com/file/d/13JrkDcVtcQFepeGoG8roBZ1xFy7iBx1R/view?usp=sharing; https://github.com/pwahba/cve-research/blob/main/CVE-2023-48978/CVE-2023-48978.md
CVE: CVE-2025-46101
Published: 2025-06-23
Description: SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in json_scorm.php file
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstorm.news/files/id/200942/; https://packetstorm.news/files/id/200942/
CVE: CVE-2025-48700
Published: 2025-06-23
Description: An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vulnerability in the Zimbra Classic UI allows attackers to execute arbitrary JavaScript within the user's session, potentially leading to unauthorized access to sensitive information. This issue arises from insufficient sanitization of HTML content, specifically involving crafted tag structures and attribute values that include an @import directive and other script injection vectors. The vulnerability is triggered when a user views a crafted e-mail message in the Classic UI, requiring no additional user interaction.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wiki.zimbra.com/wiki/Security_Center; https://wiki.zimbra.com/wiki/Zimbra_Responsible_Disclosure_Policy; https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories
CVE: CVE-2025-52875
Published: 2025-06-23
Description: In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-52876
Published: 2025-06-23
Description: In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-52877
Published: 2025-06-23
Description: In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-52878
Published: 2025-06-23
Description: In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-52879
Published: 2025-06-23
Description: In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-52967
Published: 2025-06-23
Description: gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-918
References: https://github.com/mlflow/mlflow/issues/15944; https://github.com/mlflow/mlflow/pull/15970; https://github.com/mlflow/mlflow/releases/tag/v3.1.0
CVE: CVE-2025-52968
Published: 2025-06-23
Description: xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. (For example, xdg-open could be modified to, by default, associate x-scheme-handler/https with the execution of a browser with command-line options that arrange for an empty cookie store, although this would add substantial complexity, and would not be considered a desirable or expected behavior by all users.) NOTE: this is disputed because integrations of xdg-open typically do not provide information about whether the xdg-open command and arguments were manually entered by a user, or whether they were the result of a navigation from content in an untrusted origin.
CVSS Score: 2.7 (LOW)
CWE: CWE-420
References: https://cgit.freedesktop.org/xdg/xdg-utils/tag/?h=v1.2.1; https://www.openwall.com/lists/oss-security/2025/06/23/1
CVE: CVE-2023-47032
Published: 2025-06-23
Description: Password Vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the UserService SOAP API function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://drive.google.com/file/d/1rTKc2nxEc40VTItJiJ9moZ5VrHG3xQuj/view?usp=sharing; https://github.com/pwahba/cve-research/blob/main/CVE-2023-47032/CVE-2023-47032.md
CVE: CVE-2023-47294
Published: 2025-06-23
Description: An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284
References: https://drive.google.com/file/d/1owG3_2oVpoCb34Mb7nCYZNrjW8cFxpzN/view?usp=sharing; https://github.com/pwahba/cve-research/blob/main/CVE-2023-47294/CVE-2023-47294.md
CVE: CVE-2023-47295
Published: 2025-06-23
Description: A CSV injection vulnerability in NCR Terminal Handler v1.5.1 allows attackers to execute arbitrary commands via injecting a crafted payload into any text field that accepts strings.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: https://drive.google.com/file/d/14uldfUpLRIc-NfHiUco0ja-ZiF0MazGA/view?usp=sharing; https://github.com/pwahba/cve-research/blob/main/CVE-2023-47295/CVE-2023-47295.md
CVE: CVE-2023-50450
Published: 2025-06-23
Description: An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated privileges.
CVSS Score: 8.4 (HIGH)
CWE: CWE-269
References: https://code-white.com/public-vulnerability-list/
CVE: CVE-2025-4563
Published: 2025-06-23
Description: A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. When the DynamicResourceAllocation feature gate is enabled, the controller properly validates resource claim statuses during pod status updates but fails to perform equivalent validation during pod creation. This allows a compromised node to create mirror pods that access unauthorized dynamic resources, potentially leading to privilege escalation.
CVSS Score: 2.7 (LOW)
CWE: CWE-20
References: https://github.com/kubernetes/kubernetes/issues/132151; https://groups.google.com/g/kubernetes-security-announce/c/Zv84LMRuvMQ
CVE: CVE-2025-6509
Published: 2025-06-23
Description: A vulnerability was found in seaswalker spring-analysis up to 4379cce848af96997a9d7ef91d594aa129be8d71. It has been declared as problematic. Affected by this vulnerability is the function echo of the file /src/main/java/controller/SimpleController.java. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250609-01/report.md; https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250609-01/report.md#steps-to-reproduce; https://vuldb.com/?ctiid.313621
CVE: CVE-2025-6510
Published: 2025-06-23
Description: A vulnerability was found in Netgear EX6100 1.0.2.28_1.1.138. It has been rated as critical. Affected by this issue is the function sub_415EF8. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6100-netgear; https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6100-netgear#poc; https://vuldb.com/?ctiid.313622
CVE: CVE-2023-47031
Published: 2025-06-23
Description: An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to escalate privileges via a crafted POST request to the grantRolesToUsers, grantRolesToGroups, and grantRolesToOrganization SOAP API component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://ncr.com; http://terminal.com; https://drive.google.com/file/d/1f9riw_seicV9MB7pRQJFY-8voxkW8ZYH/view?usp=sharing
CVE: CVE-2025-52969
Published: 2025-06-23
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-6511
Published: 2025-06-23
Description: A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6150-netgear; https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex6150-netgear#poc; https://vuldb.com/?ctiid.313623
CVE: CVE-2025-6516
Published: 2025-06-23
Description: A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-122, CWE-787
References: https://github.com/HDFGroup/hdf5/issues/5581; https://github.com/user-attachments/files/20626851/reproduce.tar.gz; https://vuldb.com/?ctiid.313636
CVE: CVE-2023-47029
Published: 2025-06-23
Description: An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted POST request to the UserService component
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://drive.google.com/file/d/1oX5uKnWGiYMaBxnBuqPiOA53XLxv1Ef4/view?usp=sharing; https://github.com/pwahba/cve-research/blob/main/CVE-2023-47029/CVE-2023-47029.md
CVE: CVE-2025-49126
Published: 2025-06-23
Description: Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack allowing full takeover of the application and exfiltration of secrets stored in the application. The implementation uses the get_swagger_ui_html function from FastAPI. This function does not encode or sanitize its arguments before using them to generate the HTML for the swagger documentation page and is not intended to be used with user-controlled arguments. Any user of this application can be targeted with a one-click attack that can takeover their session and all the secrets that may be contained within it. This issue has been patched in version 2.5.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://github.com/Visionatrix/Visionatrix/commit/63aafe6e4d1bffe4bf69e73b6fdfc65c71a8f5b8; https://github.com/Visionatrix/Visionatrix/security/advisories/GHSA-w36r-9jvx-q48v
CVE: CVE-2025-6517
Published: 2025-06-23
Description: A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add of the file maxkey-webs\maxkey-web-mgt\src\main\java\org\dromara\maxkey\web\apps\contorller\SAML20DetailsController.java of the component Meta URL Handler. The manipulation of the argument post leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/honorseclab/vulns/blob/main/dromara_MaxKey/SSRF.md; https://github.com/honorseclab/vulns/blob/main/dromara_MaxKey/SSRF.md#vulnerability-verification; https://vuldb.com/?ctiid.313637
CVE: CVE-2025-49144
Published: 2025-06-23
Description: Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. An attacker could use social engineering or clickjacking to trick users into downloading both the legitimate installer and a malicious executable to the same directory (typically Downloads folder - which is known as Vulnerable directory). Upon running the installer, the attack executes automatically with SYSTEM privileges. This issue has been fixed and will be released in version 8.8.2.
CVSS Score: 7.3 (HIGH)
CWE: CWE-272, CWE-276, CWE-427
References: https://drive.google.com/drive/folders/11yeUSWgqHvt4Bz5jO3ilRRfcpQZ6Gvpn; https://github.com/notepad-plus-plus/notepad-plus-plus/commit/f2346ea00d5b4d907ed39d8726b38d77c8198f30; https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-9vx8-v79m-6m24
CVE: CVE-2025-50348
Published: 2025-06-23
Description: PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/baixiaobi/Pre-School-/blob/main/directory%20traversal%20vulnerability-3.md; https://github.com/baixiaobi/Pre-School-/blob/main/directory%20traversal%20vulnerability-3.md
CVE: CVE-2025-50349
Published: 2025-06-23
Description: PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/baixiaobi/Pre-School-/blob/main/directory%20traversal%20vulnerability-4.md; https://github.com/baixiaobi/Pre-School-/blob/main/directory%20traversal%20vulnerability-4.md
CVE: CVE-2025-6518
Published: 2025-06-23
Description: A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/single_llm_call.py of the component Jinja2 Template Handler. The manipulation of the argument user_message leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-791, CWE-1336
References: https://github.com/PySpur-Dev/pyspur/issues/289; https://vuldb.com/?ctiid.313638; https://vuldb.com/?id.313638
CVE: CVE-2025-6545
Published: 2025-06-23
Description: Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js.

This issue affects pbkdf2: from 3.0.10 through 3.1.2.
CWE: CWE-20
References: https://github.com/browserify/pbkdf2/commit/9699045c37a07f8319cfb8d44e2ff4252d7a7078; https://github.com/browserify/pbkdf2/commit/e3102a8cd4830a3ac85cd0dd011cc002fdde33bb; https://github.com/browserify/pbkdf2/security/advisories/GHSA-h7cp-r72f-jxh6
CVE: CVE-2025-6547
Published: 2025-06-23
Description: Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: <=3.1.2.
CWE: CWE-20
References: https://github.com/browserify/pbkdf2/commit/e3102a8cd4830a3ac85cd0dd011cc002fdde33bb; https://github.com/browserify/pbkdf2/security/advisories/GHSA-v62p-rq8g-8h59
CVE: CVE-2021-47688
Published: 2025-06-23
Description: In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass the allow-list functionality because a file can be truncated in the OpenFileDescriptor action before the VerifyCanWrite action is performed.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-696
References: https://github.com/WhiteBeamSec/WhiteBeam/pull/22; https://github.com/WhiteBeamSec/WhiteBeam/security/advisories/GHSA-3f8r-9483-pfxj; https://github.com/WhiteBeamSec/WhiteBeam/security/policy
CVE: CVE-2023-47030
Published: 2025-06-23
Description: An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via a GET request to a UserService SOAP API endpoint to validate if a user exists.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://drive.google.com/file/d/1ujUcB8XEs78WwWzs8cmD-u1Twqi10yEh/view?usp=sharing; https://github.com/pwahba/cve-research/blob/main/CVE-2023-47030/CVE-2023-47030.md
CVE: CVE-2025-44528
Published: 2025-06-23
Description: An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via sending a crafted LL_Pause_Enc_Req packet during the authentication and connection phase, causing a Denial of Service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://lp-cc2652rb.com; http://texas.com; https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/TI/Accept_Pause_Enc_Req.md
CVE: CVE-2025-48026
Published: 2025-06-23
Description: A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful exploit could allow an attacker to read files from the underlying OS and obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.mitel.com/support/mitel-product-security-advisory-misa-2025-0005; https://www.mitel.com/support/security-advisories