Beveiligingsadvies

CVE-2025-0743

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-30 11:16:46

Laatst bijgewerkt 2025-02-18 19:03:35

Toegewezen door INCIBE

CVSS-score 5.3

Status PUBLISHED

Beschrijving

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint "/embedai/visits/show/<VISIT_ID>" to obtain information about the visits made by other users. The information provided by this endpoint includes IP address, userAgent and location of the user that visited the web page.

← Alle CVE's bekijken Bekijk op cve.org ↗