Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users

🗓️ 28 May 2025 14:38:54Reported by GitHub Advisory DatabaseType

Valtimo backend libraries allow unauthorized access to and modification of objects in the object-api.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2025-48881	30 May 202507:06	–	circl
CNNVD	valtimo-backend-libraries 安全漏洞	30 May 202500:00	–	cnnvd
CVE	CVE-2025-48881	30 May 202505:21	–	cve
Cvelist	CVE-2025-48881 Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users	30 May 202505:21	–	cvelist
EUVD	EUVD-2025-16916	3 Oct 202520:07	–	euvd
NVD	CVE-2025-48881	30 May 202506:15	–	nvd
OSV	GHSA-965R-9CG9-G42P Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users	28 May 202514:38	–	osv
Positive Technologies	PT-2025-23221 · Valtimo · Valtimo	28 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-48881	1 Jun 202505:35	–	redhatcve
Snyk	Incorrect Authorization	28 May 202514:38	–	snyk

Vulners

Node

com.ritense.valtimo objecten-apiRange12.0.0.RELEASE–12.13.0.RELEASEmaven

com.ritense.valtimo object-managementRange12.0.0.RELEASE–12.13.0.RELEASEmaven

com.ritense.valtimo object-managementRange11.0.0.RELEASE–11.3.3.RELEASEmaven

com.ritense.valtimo objecten-apiRange11.0.0.RELEASE–11.3.3.RELEASEmaven

Source	Link
github	www.github.com/valtimo-platform/valtimo-backend-libraries/security/advisories/GHSA-965r-9cg9-g42p
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-48881
github	www.github.com/valtimo-platform/valtimo-backend-libraries/commit/6ab04b30d3dab816bfea32d40ba50e5dd4517272
github	www.github.com/advisories/GHSA-965r-9cg9-g42p

04 Jun 2025 20:48Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.3

EPSS0.00291

SSVC