CVE-2025-8909

MEDIUM 6.5CVE-2025-8909 · Published 13/08/2025 · updated 17/06/2026

In short

CVE-2025-8909 is a MEDIUM (CVSS 6.5) vulnerability affecting organization portal system (wellchoose).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.0% of all vulnerabilities.
Fix: update to IFTOP_P3_2_1_197 or later.

Package	Affected versions	Patched versions
organization portal system wellchoose	`< IFTOP_P3_2_1_197`	`IFTOP_P3_2_1_197`

Description

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

References

twcert.org.tw/en/cp-139-10325-70192-2.html · Third Party Advisory
twcert.org.tw/tw/cp-132-10321-3cae5-1.html · Third Party Advisory

More vulnerabilities in organization portal system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

organization portal system

wellchoose

< IFTOP_P3_2_1_197

IFTOP_P3_2_1_197

More vulnerabilities in organization portal system

See all →