carRental vulnerabilities

2 known vulnerabilities in carRental from Yeqifu. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  carRental: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-15432Jan 2, 2026Yeqifu

  A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This vulnerability affects the function downloadShowFile of the file /file/downloadShowFile.action of the component com.yeqifu.sys.controller.FileController. The

• 7.5 High severity

  carRental: Use of Hard-coded Credentials

  CVE-2025-9310Aug 21, 2025Yeqifu

  A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an unknown functionality of the file /carRental_war/druid/login.html of the component Druid. Executing manipulation can lead to