External Control of File Name Vulnerability in SUNNET Corporate Training Management System
CVE-2025-54945

10CRITICAL

Key Information:

Vendor

Sunnet Technology Co., Ltd.

Status
Corporate Training Management System
Vendor
CVE Published:
30 August 2025

What is CVE-2025-54945?

A vulnerability in the SUNNET Corporate Training Management System allows remote attackers to execute arbitrary system commands. This occurs due to improper validation of external input, which can be exploited via crafted files that manipulate the destination file path. As a result, unauthorized users may gain control over system processes, thus compromising system integrity and security.

Affected Version(s)

Corporate Training Management System 0

References

https://zuso.ai/advisory/
third-party-advisory

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-54945 : External Control of File Name Vulnerability in SUNNET Corporate Training Management System