aaluoxiang oa_system Path Trv. in ProcedureController Image
CVE-2025-5545 Published on June 4, 2025
aaluoxiang oa_system ProcedureController.java image path traversal
A vulnerability classified as problematic has been found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5. This affects the function image of the file src/main/java/cn/gson/oasys/controller/process/ProcedureController.java. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Timeline
Advisory disclosed
VulDB entry created
VulDB entry last update
Weakness Type
What is a Directory traversal Vulnerability?
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CVE-2025-5545 has been classified to as a Directory traversal vulnerability or weakness.
Products Associated with CVE-2025-5545
Want to know whenever a new CVE is published for Aaluoxiang Oa System? stack.watch will email you.
Affected Versions
aaluoxiang oa_system Version 5b445a6227b51cee287bd0c7c33ed94b801a82a5 is affected by CVE-2025-5545Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.