Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•2 views

CVE-2025-64061: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient access control mechanisms. Any authenticated user, regardless of their privilege level including standard or low-privileged users, can make a GET request to this endpoint and retrieve a...

4.3CVSS5.8AI score0.00218EPSS
SaveExploits0References1
Rows per page
Query Builder