CVE-2025-67171
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal. The vulnerability enables reading files outside the intended directory.
Risk Assessment
An attacker can access sensitive system files, potentially leading to information disclosure and further attacks. The risk is high for sites using RiteCMS.
Recommendation
Update RiteCMS to the latest version or apply security patches. Restrict access to the /templates/ directory and monitor for unusual requests.
Other vulnerabilities in RiteCMS
See allOriginal NVD description (English source)
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS