Security Advisory

CVE-2025-48042

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-07 16:01:01

Last updated 2026-07-24 14:14:03

Assigner EEF

CVSS score 7.1

State PUBLISHED

Description

Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This vulnerability is associated with program files lib/ash/actions/create/bulk.ex, lib/ash/actions/destroy/bulk.ex, lib/ash/actions/update/bulk.ex and program routines 'Elixir.Ash.Actions.Create.Bulk':run/5, 'Elixir.Ash.Actions.Destroy.Bulk':run/6, 'Elixir.Ash.Actions.Update.Bulk:run'/6. This issue affects ash: from 0.1.0 before 3.5.39.

← Browse all CVEs View on cve.org ↗