CVE-2025-25683

AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1...

CVE-2025-25683

creationtimestamp| type| source ---|---|--- 2025-03-12 16:41:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7336 2025-03-12 19:25:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk7cpuykbf2w 2025-03-12 20:22:56+00:00| seen| https://t.me/cvedetector/20148 2025-08-13...

CVE-2025-25683

AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1...

CVE-2025-25683

AlekSIS-Core is vulnerable to Incorrect Access Control. Unauthenticated users can access all PDF files. This affects AlekSIS-Core 3.0, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.2.0 and 3.2.1...

CVE-2025-25683

The aleksis-core package (the core of the AlekSIS framework) is vulnerable to Incorrect Access Control , allowing unauthenticated users to access sensitive PDF files. An attacker can trigger the generation of a PDF file, identify its ID via a GraphQL request , and then iterate through IDs to acce...