CVE-2025-40662 — Absolute path disclosure vulnerability in DM Corporative CMS

CVE-2025-40662

Absolute path disclosure vulnerability in DM Corporative CMS PUBLISHED

Description (CNA)

Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file.

Affected (CNA)

Vendor / product	Versions
Dmacroweb / DM Corporative CMS	affected 0 before 2025.01

CWE

CWE-200

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-dm-corporative-cms-dmacroweb

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.