CVE-2025-4634

Published May 30, 2025

Last updated 2 months ago

CVSS medium 4.1

Overview

Description
The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to manipulate requests to view files on the filesystem
Source
cve_disclosure@tech.gov.sg
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
4.1
Impact score
1.4
Exploitability score
2.3
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Severity
MEDIUM

Weaknesses

cve_disclosure@tech.gov.sg
CWE-552

Social media

Hype score
Not currently trending

  1. CVE-2025-4634 The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to manipulat… https://t.co/ccfcVDhCRs

    @CVEnew

    30 May 2025

    359 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.