CVE-2025-57266: CVE-2025-57266: güvenlik açığı

Açıklama (NVD)

An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthenticated attackers to gain sensitive information such as API Keys via the /api/assistant/list endpoint.

Özet bilgiler

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,37 (yüzdelik 32)

CWE

CWE-284

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• gist.github.com
• github.com
• CWE-284