CVE-2025-62735
Medium · 5.3CVSS
5.3
EPSS
0.3%
Published
Dec 9, 2025
CISA due date
—
The record
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Joel User Spam Remover user-spam-remover allows Retrieve Embedded Sensitive Data.This issue affects User Spam Remover: from n/a through <= 1.1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109823 An attacker can read the name of filesystem paths of your application present via… CWE-497
- CVE-2026-111079 A flaw was found in Goose. CWE-497
- CVE-2026-111946 Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode… CWE-497
- CVE-2026-96865 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-85866 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83909 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83907 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497
- CVE-2026-83905 Exposure of sensitive system information to an unauthorized control sphere in Windows… CWE-497