CVE-2025-46826

Publication date

2025-05-07 21:32:30

Family

GitHub_M

State

PUBLISHED

Description

insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the servers secondary authentication bridge, potentially revealing basic student information (name and number). However, the issue posed minimal risk, was never exploited, and had limited impact. A fix was implemented promptly on May 3, 2025.