File Inclusion Vulnerability in Nokia Web Applications

CVE-2025-24937

What is CVE-2025-24937?

An attacker can exploit this vulnerability to access sensitive content from the local file system due to improper file handling in the affected web applications. This enables unauthorized users to insert malicious code into files handled by the web server, potentially compromising not just the application, but also the underlying container environment. The open nature of the network stack further expands the attack surface to a broad range of potential attackers across the internet.

References