Security Advisory

CVE-2025-23778

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-01-16 20:06:58
Last updated 2026-05-11 22:58:51
Assigner Patchstack
CVSS score 5.4
State PUBLISHED

Description

Missing Authorization vulnerability in Pravin Durugkar User Sync ActiveCampaign registered-user-sync-activecampaign allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Sync ActiveCampaign: from n/a through <= 1.3.2.