Home

Description

The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function.

PUBLISHED Reserved 2025-04-16 | Published 2025-09-24 | Updated 2025-09-24 | Assigner CERTVDE




MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

Default status
unaffected

0.0.0 (semver) before 2.3.3
affected

References

certvde.com/de/advisories/VDE-2025-087

cve.org (CVE-2025-41716)

nvd.nist.gov (CVE-2025-41716)

Download JSON