Beveiligingsadvies

CVE-2025-13932

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-04 21:17:03
Laatst bijgewerkt 2025-12-05 16:32:02
Toegewezen door icscert
CVSS-score 8.3
Status PUBLISHED

Beschrijving

The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed data of any plant by altering the plant_id in the request.