Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit this issue to read arbitrary system files by supplying a crafted file path, potentially exposing sensitive information.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Arakiba/CVEs/tree/main/CVE-2025-26137 | Third Party Advisory |
Configurations
History
01 Apr 2025, 20:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:systemic-rm:risk_value:*:*:*:*:*:*:*:* | |
| References | () https://github.com/Arakiba/CVEs/tree/main/CVE-2025-26137 - Third Party Advisory | |
| First Time |
Systemic-rm
Systemic-rm risk Value |
18 Mar 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-18 17:15
Updated : 2025-04-01 20:37
NVD link : CVE-2025-26137
Mitre link : CVE-2025-26137
JSON object : View
Products Affected
systemic-rm
- risk_value
CWE
No CWE.