CVE-2025-60946
Census CSWeb 8.0.1 allows arbitrary file path input.
Published Mar 23, 2026 · updated Jun 17, 2026 · csprousers csweb
Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 23, 2026 · NIST NVD
Detected
Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.
Jun 17, 2026 · NIST NVD
Updated
Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.
Affected
- cpe csprousers/csweb8.0.1
Sources
- CVE.orgVulnerability recordCVE-2025-60946
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-60946
Census CSWeb 8.0.1 allows arbitrary file path input. A remote, authenticated attacker could access unintended file directories. Fixed in 8.1.0 alpha.
nvd.nist.gov