CVE-2025-45529: An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a...
7.1
CVSS
Description
An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templates/templatesAssetsEditor.
Classification
CVE ID: CVE-2025-45529
CVSS Base Severity: HIGH
CVSS Base Score: 7.1
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 8.42% (scored less or equal to compared to others)
EPSS Date: 2025-06-08 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-45529https://github.com/sec-Kode/cve/blob/main/cve2.md
https://gist.github.com/sec-Kode/000fbab6dc649888bc196e76a4076b57