Security Advisory

CVE-2025-0743

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-30 11:16:46

Last updated 2025-02-18 19:03:35

Assigner INCIBE

State PUBLISHED

Description

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint "/embedai/visits/show/<VISIT_ID>" to obtain information about the visits made by other users. The information provided by this endpoint includes IP address, userAgent and location of the user that visited the web page.

← Browse all CVEs View on cve.org ↗