CVE-2025-1982

Local File Inclusion vulnerability in Ready’s attachment upload panel allows low privileged user to provide link to a local file using the file:// protocol thus allowing the attacker to read content of the file. This vulnerability can be use to read content of system files.

More information : https://cert.pl/en/posts/2025/04/CVE-2025-1980