CVE-2025-8909 — WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal

CVE-2025-8909

WellChoose｜Organization Portal System - Arbitrary File Reading through Path Traversal PUBLISHED

Description (CNA)

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

Affected (CNA)

Vendor / product	Versions
WellChoose / Organization Portal System	affected 0 through IFTOP_P3_2_1_196

CWE

CWE-36

References

https://www.twcert.org.tw/tw/cp-132-10321-3cae5-1.html
https://www.twcert.org.tw/en/cp-139-10325-70192-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.