CVE-2025-13771

None

CVSS

—

EPSS

0.5%

Published

Nov 28, 2025

CISA due date

—

The record

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

Affected packages

Ecosystem	Package	Introduced	Fixed