CVE-2025-30048

Publication date

2025-08-27 10:22:14

Family

CERT-PL

State

PUBLISHED

Description

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.