Description
A lack of validation in the path parameter (/download) of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request.
High · 7.5
CVE-2025-25684
EUVD-2025-6546GHSA-w9c3-8j7h-3cq6
A lack of validation in the path parameter (/download) of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files fr…
Published Mar 17, 2025 · Updated Mar 19, 2025 · Assigned by mitre