CVE-2025-63738
Medium · 4.3CVSS
4.3
EPSS
0.3%
Published
Dec 9, 2025
CISA due date
—
The record
An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|