CVE-2025-14521
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A vulnerability in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c affects an unknown function in the file /admin/index.php/datafile/download. Manipulating the filename argument leads to path traversal. The attack can be performed remotely, and the exploit has been publicly disclosed.
Risk Assessment
The risk involves remote access to arbitrary files on the server, potentially leading to disclosure of sensitive data or further system compromise.
Recommendation
It is recommended to immediately restrict access to the admin panel and apply vendor patches. Also monitor logs for unusual requests.
Other vulnerabilities in baowzh hfly
See all- CVE-2025-14522Medium
A vulnerability was detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The impacted element is an unknown function of the file /Public/Kindeditor/php/upload_json.php. Manipulation of the argument imgFile results in unrestricted upload. The attack can be initiated remotely, and the exploit is now public and may be used.
- CVE-2025-14520Medium
A vulnerability in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c affects an unknown function in the file /admin/index.php/datafile/delfile. Manipulating the filename argument causes path traversal. The attack can be performed remotely, and the exploit has been publicly disclosed.
Original NVD description (English source)
A security vulnerability has been detected in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. The affected element is an unknown function of the file /admin/index.php/datafile/download. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS