CVEs-PoC/2025/CVE-2025-1982.md

CVE-2025-1982

Description

Local File Inclusion vulnerability in Ready's attachment upload panel allows low privileged user to provide link to a local file using the file:// protocol thus allowing the attacker to read content of the file. This vulnerability can be use to read content of system files.

POC

Reference

No PoCs from references.

Github

• https://github.com/DojoSecurity/DojoSecurity
• https://github.com/afine-com/research
• https://github.com/vemusx/vemusx