CVE-2025-67810 — n/a / n/a

Description (CNA)

In Area9 Rhapsode 1.47.3, an authenticated attacker can exploit the operation, url, and filename parameters via POST request to read arbitrary files from the server filesystem. Fixed in 1.47.4 (#7254) and further versions.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://area9.com
https://security.area9lyceum.com/cve-2025-67810/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.