CVE-2025-28099

opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - cve@mitre.org

Published

2025-04-21

Last modified

2025-05-12

Weaknesses

CWE-22

Affected products

• Opencms (Fumiao)

References

• https://gist.github.com/kaoniniang2/e159346725f50d6c44c82214970f02b8
• https://gitee.com/fumiao/opencms/issues/IBLJLM