CVE-2025-50233

CVE-2025-50233 is a directory traversal vulnerability in QCMS version 6.0.5, allowing authenticated users to read arbitrary files from the server. This medium-severity flaw (CVSS 6.5) stems from insufficient validation of the "Name" parameter in the backend template editor, enabling attackers to access sensitive files like configuration or source code. While the attack complexity is low and no user interaction is required, it only impacts confidentiality and integrity. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.