Skip to content
OpenAdvisories
High · 7.5 CVE-2025-26137 EUVD-2025-6693GHSA-xxjw-fx2f-9c38

Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit thi…

Published Mar 18, 2025 · Updated Mar 25, 2025 · Assigned by mitre

Description

Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit this issue to read arbitrary system files by supplying a crafted file path, potentially exposing sensitive information.

References