Security Advisory

CVE-2025-2306

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-16 12:10:13

Last updated 2025-05-16 13:02:39

Assigner cirosec

CVSS score 5.9

State PUBLISHED

Description

An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sensitive documents without authentication, if the URL is known. The attack requires the attacker to know the documents UUIDv4.

← Browse all CVEs View on cve.org ↗