Security Advisory

CVE-2025-54291

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-02 09:25:42

Last updated 2025-10-02 17:29:54

Assigner canonical

CVSS score 6.9

State PUBLISHED

Description

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses.

← Browse all CVEs View on cve.org ↗