CVE-2025-23164

Publication date

2025-05-19 01:25:08

Family

hackerone

State

PUBLISHED

Description

A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to the corresponding livestream subsequent to such link becoming disabled.