CVE-2019-25574

CVE-2019-25574 is a path traversal vulnerability in Green CMS 2.x that allows authenticated attackers to download arbitrary files and directories from the affected system. This medium-severity issue (CVSS 6.5) has a low attack complexity and can lead to high confidentiality impact by enabling the retrieval of sensitive files outside intended directories. Attackers can achieve this by injecting directory traversal sequences into parameters like 'theme_name' or by supplying base64-encoded file paths. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.