A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. It has been declared as problematic. Affected by this vulnerability is the function
handleFileDownload of the file FileController.java of the component File Handler. The manipulation leads to path traversal.
This vulnerability is known as CVE-2025-4530. The attack can be launched remotely. Furthermore, there is an exploit available.
This product is distributed under two entirely different names.
