CVE-2025-8909

MEDIUM

Wellchoose Organization Portal System - Path Traversal

Title source: rule
STIX 2.1

Description

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

References (2)

Scores

CVSS v3 6.5
EPSS 0.0010
EPSS Percentile 26.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-22 CWE-36
Status published
Products (1)
wellchoose/organization_portal_system < IFTOP_P3_2_1_197
Published Aug 13, 2025
Tracked Since Feb 18, 2026