CVE-2025-11018
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
A vulnerability in Four-Faith Water Conservancy Informatization Platform 1.0 affects an unknown function in /sysRole/index.do/../../generalReport/download.do;usrlogout.do.do. Manipulation of the fileName argument leads to path traversal. The attack can be launched remotely and the exploit is public.
Risk Assessment
An attacker can read arbitrary files on the server, potentially leading to disclosure of sensitive data.
Recommendation
Update the platform or restrict access to vulnerable endpoints.
Other vulnerabilities in Four-Faith Water Conservancy Informatization Platform
See all- CVE-2025-11337Medium
A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Manipulation of the fileName argument in the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do results in path traversal. The attack can be initiated remotely and the exploit is now public.
- CVE-2025-11336Medium
A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Manipulation of the fileName argument in the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do leads to path traversal. The attack may be performed remotely and the exploit has been disclosed publicly.
- CVE-2025-10709Medium
A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this issue is some unknown functionality of the file /history/historyDownload.do;otheruserLogin.do;getfile. The manipulation of the argument fileName results in path traversal. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Original NVD description (English source)
A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0. This affects an unknown function of the file /sysRole/index.do/../../generalReport/download.do;usrlogout.do.do. Executing manipulation of the argument fileName can lead to path traversal. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS