CVE-2025-8912

HIGH

Wellchoose Organization Portal System - Path Traversal

Title source: rule
STIX 2.1

Description

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0016
EPSS Percentile 36.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-22 CWE-36
Status published
Products (1)
wellchoose/organization_portal_system < IFTOP_P3_2_1_197
Published Aug 13, 2025
Tracked Since Feb 18, 2026