A
n Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sensitive documents without authentication, if the URL is known. The attack requires the attacker to know the documents UUIDv4.
References
| Link | Resource |
|---|---|
| https://www.cirosec.de/sa/sa-2025-004 |
Configurations
No configuration.
History
16 May 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-16 13:15
Updated : 2025-05-16 14:42
NVD link : CVE-2025-2306
Mitre link : CVE-2025-2306
CVE.ORG link : CVE-2025-2306
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control