Skip to content
OpenAdvisories

Product · Welotec

SmartEMS Web Application

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-41714

    Path Traversal via 'Upload-Key' in SmartEMS Upload Handling

    The upload endpoint insufficiently validates the 'Upload-Key' request header. By supplying path traversal sequences, an authenticated attacker can cause the server to create upload-related artifacts outside the intended storage location. In certain configurat…

    Welotec SmartEMS Web Application