CVE-2025-67171 Details

A directory traversal vulnerability has been identified in the templates component of RiteCMS version 3.1.0. This vulnerability allows attackers to bypass access controls and access sensitive files. The issue arises from incorrect access control, which enables directory traversal attacks. Exploitation involves sending HTTP GET requests to directory endpoints within the templates component, where the server responds with a directory listing that can be navigated to access files and subdirectories. Notably, this vulnerability does not require authentication and can be exploited in private or incognito browsing sessions.