Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🟠 CVE-2025-60946 - High Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha. https://www.thehackerwire.com/vulnerability/CVE-2025-60946/ https://t.co/yVDvniMqbb
Post summary
Census CSWeb 8.0.1 has a high‑severity flaw allowing a remote authenticated attacker to read unintended files; the issue is fixed in version 8.1.0 alpha.
[CVE-2025-60946: HIGH] Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.#cve,CVE-2025-60946,#cybersecurity https://cvefind.com/CVE-2025-60946
Post summary
Census CSWeb 8.0.1 is vulnerable to arbitrary file path input, allowing remote authenticated attackers to read unintended directories; the issue is mitigated in version 8.1.0 alpha.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | csprousers | csweb | 8.0.1 | - | - |