CVE-2025-54834 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for…
Medium CVSS: 6.9

CVE-2025-54834

OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames. There are no rate-limiting mechanisms in place.
Vendor
Opexustech
Product
Foiaxpress Public Access Link
CWE
CWE-204
Yayın Tarihi
2025-07-31 18:15:43
Güncelleme
2026-01-23 02:38:53
Source Identifier
9119a7d8-5eab-497f-8521-727c672e3725
KEV Date Added
-

Kategoriler

CWE-204 Foiaxpress Public Access Link MEDIUM Opexustech 2025

Referanslar

https://docs.opexustech.com/docs/foiaxpress/11.12.0/FOIAXpress_Release_notes_11.12.3.0.pdf https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-174-01.json https://www.cve.org/CVERecord?id=CVE-2025-54834