CVE-2025-27590

Publication date

2025-03-03 00:00:00

Family

mitre

State

PUBLISHED

Description

In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.