CVEvulnerability

CVE-2025-66955

6.5 MEDIUM Published 2026-03-12 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2026-03-12
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-552

Description

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" parameter in the downloadAttachment and downloadAttachmentFromPath API calls.

Affected configurations

• asseco live 2.0

Related

Weakness · CWE (1)

  • CWE-552 Files or Directories Accessible to External Parties weakness

References