Логотип exploitDog
bind:CVE-2025-54768
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-54768

Количество 2

Количество 2

nvd логотип

CVE-2025-54768

7 месяцев назад

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-9fr7-pvrj-ff37

7 месяцев назад

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-54768

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

CVSS3: 5.3
0%
Низкий
7 месяцев назад
github логотип
GHSA-9fr7-pvrj-ff37

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to download logs from the appliance configuration, exposing sensitive information.

CVSS3: 5.3
0%
Низкий
7 месяцев назад

Уязвимостей на страницу