Four-faith Water Conservancy Informatization vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Four-faith Water Conservancy Informatization: 1 record(s), with affected versions and fixes.
cpe:2.3:a:four-faith:water_conservancy_informatization

CVE-2025-11018 High · 7.5 CWE-22 Sep 26, 2025

Four-Faith Water Conservancy Informatization Platform download.do;usrlogout.do.do path traversal

A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0. This affects an unknown function of the file /sysRole/index.do/../../generalReport/download.do;usrlogout.do.do. Executing manipulation of the argument fileName can lead to path traversal. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.