Vulnerabilities

TI-2025-12147 CVE-2025-13283 · GHSA-c34c-4874-rxgm

Chunghwa Telecom｜TenderDocTransfer - Arbitrary File Copy and Paste

LOW 30

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Copy and Paste vulnerability.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00255 Published 2025-11-17 Fixed in 0.41.159 CWE-352

TI-2025-12146 CVE-2025-13282 · GHSA-mr39-8q83-8vfh

LOW 31

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00285 Published 2025-11-17 Fixed in 0.41.159 CWE-352

TI-2024-11727 CVE-2024-12642 · GHSA-3jx4-4w9w-g9w4

LOW 35

TenderDocTransfer from Chunghwa Telecom has an Arbitrary File Write vulnerability.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0037 Published 2024-12-16 No fix listed CWE-23

TI-2024-11726 CVE-2024-12641 · GHSA-7wc4-v88g-h92f

MEDIUM 46

TenderDocTransfer from Chunghwa Telecom has a Reflected Cross-site scripting vulnerability.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01429 Published 2024-12-16 No fix listed CWE-79