CVE-2025-45529

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-45529
An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.
CVSS

No CVSS.

References
Link Resource
https://gist.github.com/sec-Kode/000fbab6dc649888bc196e76a4076b57 Third Party Advisory
https://github.com/sec-Kode/cve/blob/main/cve2.md Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:sscms:siteserver_cms:7.3.1:*:*:*:*:*:*:*
History

30 Jun 2025, 15:24

Type Values Removed Values Added
First Time Sscms siteserver Cms
Sscms
CPE cpe:2.3:a:sscms:siteserver_cms:7.3.1:*:*:*:*:*:*:*
References () https://gist.github.com/sec-Kode/000fbab6dc649888bc196e76a4076b57 - () https://gist.github.com/sec-Kode/000fbab6dc649888bc196e76a4076b57 - Third Party Advisory
References () https://github.com/sec-Kode/cve/blob/main/cve2.md - () https://github.com/sec-Kode/cve/blob/main/cve2.md - Exploit

27 May 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-27 19:15

Updated : 2025-06-30 15:24

NVD link : CVE-2025-45529

Mitre link : CVE-2025-45529

JSON object : View

Products Affected

sscms

  • siteserver_cms
CWE

No CWE.