CVE-2025-67223 Information disclosure in n/a
Unauthenticated attackers can download sensitive documents containing PII by exploiting predictable log file names in the Aranda File Server component.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-67223?
CVE-2025-67223 is a high-severity vulnerability in n/a, published on 28 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly accessible directory, which allows unauthenticated remote attackers to obtain direct virtual paths of uploaded files and bypass access controls to download sensitive documents containing PII.
Which versions are affected by CVE-2025-67223?
How do I fix CVE-2025-67223?
No fix has been published for CVE-2025-67223 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-67223 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-67223 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-2h63-r9g4-jvhv.