CVE-2025-14580: qualitor before 8.20.78 (exclusive), from 8.24 (inclusive), before 8.24.74 (exclusive); +1 more affected products

Affected technology

qualitor · before 8.20.78 (exclusive)
qualitor

qualitor · from 8.24 (inclusive), before 8.24.74 (exclusive)
qualitor

Qualitor · 8.24.0, 8.24.1, 8.24.2, 8.24.3, 8.24.4, 8.24.5, 8.24.6, 8.24.7, 8.24.8, 8.24.9, 8.24.10, 8.24.11, 8.24.12, 8.24.13, 8.24.14, 8.24.15, 8.24.16, 8.24.17, 8.24.18, 8.24.19, 8.24.20, 8.24.21, 8.24.22, 8.24.23, 8.24.24, 8.24.25, 8.24.26, 8.24.27, 8.24.28, 8.24.29, 8.24.30, 8.24.31, 8.24.32, 8.24.33, 8.24.34, 8.24.35, 8.24.36, 8.24.37, 8.24.38, 8.24.39, 8.24.40, 8.24.41, 8.24.42, 8.24.43, 8.24.44, 8.24.45, 8.24.46, 8.24.47, 8.24.48, 8.24.49, 8.24.50, 8.24.51, 8.24.52, 8.24.53, 8.24.54, 8.24.55, 8.24.56, 8.24.57, 8.24.58, 8.24.59, 8.24.60, 8.24.61, 8.24.62, 8.24.63, 8.24.64, 8.24.65, 8.24.66, 8.24.67, 8.24.68, 8.24.69, 8.24.70, 8.24.71, 8.24.72, 8.24.73
Vendor not specified by the source

Description’s affected range: up to 8.24.73

Component: Not specified by the source
Function: of
File: /Qualitor/html/bc/bcdocumento9/biblioteca/request/viewDocumento.php

Attack conditions (VulDB, CVSS 4.0): Network (remote) · Low privileges required · Passive user interaction

What an attacker can do

VulDB’s CVSS 4.0 assessment (base score 2.0/10) rates confidentiality and availability impact as none; integrity impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.