CVE-2025-57266

An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthenticated attackers to gain sensitive information such as API Keys via the /api/assistant/list endpoint...

PT-2025-39877

Name of the Vulnerable Software and Affected Versions ThriveX Blogging Framework versions 2.5.9 through 3.1.3 Description An issue exists in the AssistantController.java file that allows unauthenticated attackers to obtain sensitive information, such as API Keys. The /api/assistant/list API...

CVE-2025-57266

An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthenticated attackers to gain sensitive information such as API Keys via the /api/assistant/list endpoint...