CVE-2025-66955

n/a / n/a PUBLISHED

Description (CNA)

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/TheWoodenBench/CVE-2025-66955
https://live.asee.io/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.