Skip to content

Instantly share code, notes, and snippets.

@sornram9254

sornram9254/Local File Inclusion in Vasco Self-Service Portal ≤ 3.14.md

Created May 21, 2025 10:09
Show Gist options
  • Save sornram9254/15eb12579b7acda8ba021217366960bd to your computer and use it in GitHub Desktop.
Save sornram9254/15eb12579b7acda8ba021217366960bd to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Local File Inclusion in Vasco Self-Service Portal ≤ 3.14.md

📄 CVE Report: CVE-2025-25539

🏢 Publisher/Developer Information

🛡️ Vulnerability Overview

  • CVE ID: CVE-2025-25539
  • Title: Local File Inclusion in Vasco Self-Service Portal ≤ 3.14
  • Published Date: 2025-05-21
  • Last Updated: 2025-05-21

🔍 Description

A Local File Inclusion (LFI) vulnerability exists in Vasco's Self-Service Portal version 3.14 and earlier. A remote attacker can exploit this issue through the help menu to gain unauthorized access to sensitive files on the host system. This includes potential access to server-side configuration files.

🖥️ Affected Products

Product Name Version Platform Status
Self-Service Portal ≤ 3.14 Windows/Linux Vulnerable

⚙️ Exploit Details

  • Attack Vector: Remote
  • Authentication Required: No
  • Privileges Required: None
  • User Interaction: Required (via Help Menu)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment