CVE-2025-0202 MEDIUM

CVE-2025-0202: TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion

Vendor Tcs
Product BaNCS
Weakness CWE-73
Published January 4, 2025
Last update January 22, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTS_SHOW_FILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment.

Key dates

02Disclosure timeline

January 4, 2025 CVE published
January 22, 2025 Record updated