TheWoodenBench/CVE-2025-66955

TheWoodenBench/CVE-2025-66955

GitHubGitHub
GitHubgithub.com
Releases0
Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-66955↗
6.5 MEDIUM—

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.