CVE-2025-34045
A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint, where insufficient input validation allows unauthenticated remote attackers to perform directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sensitive information such as configuration files and source code. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
- CVSS 4.0
- 8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 4.34% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- weiphp/weiphp
- Source
- disclosure@vulncheck.com
References
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2020/CNVD-2020-68596.yamlExploit
- https://vulncheck.com/advisories/weiphp-path-traversal-file-readExploit, Third Party Advisory
- https://www.cnvd.org.cn/flaw/show/CNVD-2020-68596Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.