CVE-2025-24346

Publication date

2025-04-30 11:39:42

Family

bosch

State

PUBLISHED

Description

A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file via a crafted HTTP request.