RULE(RULE ID:338658)

Rule General Information
Release Date: 2025-01-22
Rule Name: Founder Changxiang All Media News Editing System imageProxy.do Arbitrary file read vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Founder Media Acquisition Rditing System is an intelligent integrated media business platform with content assets as its core, integrating omni-channel content such as newspaper, network, terminal, micro and we-media distribution platforms. The imageProxy.do interface of the system has an arbitrary file reading vulnerability, which can be used by a remote attacker to read system files.
Impact: An attacker can use this vulnerability to read arbitrary files on the server.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.