Description


An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

Related CPE's


Could not find any relations

Weaknesses



CWE-639

CVSS impact metrics


Missing metrics for CVSS V

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information


Source identifier

655498c3-6ec5-4f0b-aea6-853b334d05a6

Vulnerability status

Awaiting analysis

Published

2025-12-19T13:16:02.993

6 hours ago

Last modified

2025-12-19T18:00:18.330

1 hour ago