CVE-2025-54766

Medium · 5.3

CVSS

5.3

EPSS

10.2%

Published

Jul 29, 2025

CISA due date

—

The record

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level read only web application users. The endpoint can be used to export the appliance configuration, exposing sensitive information.

Affected packages

Ecosystem	Package	Introduced	Fixed