Absolute Path Disclosure Vulnerability in DM Corporative CMS by DMACROWEB

CVE-2025-40662

What is CVE-2025-40662?

An absolute path disclosure vulnerability exists in DM Corporative CMS, which can be exploited by an attacker to reveal the contents of the webroot/file directory when attempting to access a non-existent file. This exposure potentially allows malicious actors to gain insights into the server's file structure, posing significant security risks.

References