Lucene search
K

35 matches found

RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.18 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.8AI score0.00241EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.10 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS6.7AI score0.00255EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/22 9:30 p.m.4 views

EUVD-2025-204739

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.3AI score0.00241EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/22 9:30 p.m.5 views

EUVD-2025-204740

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

6.2AI score0.00255EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/22 9:30 p.m.5 views

EUVD-2025-204736

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS6.3AI score0.00241EPSS
Exploits0References3
OSV
OSV
added 2025/12/22 7:15 p.m.5 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00241EPSS
Exploits0References2
OSV
OSV
added 2025/12/22 7:15 p.m.3 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00255EPSS
Exploits0References2
OSV
OSV
added 2025/12/22 7:15 p.m.4 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00241EPSS
Exploits0References2
NVD
NVD
added 2025/12/22 7:15 p.m.4 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS0.00241EPSS
Exploits0References2
NVD
NVD
added 2025/12/22 7:15 p.m.4 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS0.00241EPSS
Exploits0References2
NVD
NVD
added 2025/12/22 7:15 p.m.3 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS0.00255EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.6 views

GT Edge AI 安全漏洞

GT Edge AI is an edge AI solution from US-based GT Edge AI. A security vulnerability exists in versions prior to GT Edge AI v2.0.10-dev, which stems from improper access control of the /api/v1/conversations//messages API, which could lead to unauthorized access to other users' message history...

7.5CVSS6.6AI score0.00241EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.4 views

GT Edge AI 安全漏洞

GT Edge AI is an edge AI solution from US-based GT Edge AI. A security vulnerability exists in GT Edge AI versions prior to v2.0.10, which stems from improper access control of the /api/v1/conversations//files API, which could lead to unauthorized access to other user files...

7.5CVSS6.6AI score0.00241EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/22 12:0 a.m.20 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

0.00241EPSS
Exploits0References2
CVE
CVE
added 2025/12/22 12:0 a.m.14 views

CVE-2025-63663

GT Edge AI Platform before v2.0.10 has an access-control flaw in the /api/v1/conversations/*/files endpoint allowing unauthorized users to access other users’ files. The issue affects GT Edge AI Platform versions prior to 2.0.10. The CVSSv3.1 base score is 7.5 (HIGH) with network attack vector an...

7.5CVSS6.4AI score0.00241EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.7 views

PT-2025-52673

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev Description An access control issue exists in the /api/v1/conversations//messages API of GT Edge AI Platform. This allows unauthorized access to message history with AI agents belonging to other...

7.5CVSS6.5AI score0.00241EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/12/22 12:0 a.m.23 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

0.00255EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.5 views

PT-2025-52671

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10-dev Description The /api/v1/agents API in GT Edge AI Platform has insecure permissions, potentially allowing unauthorized access to sensitive information. The API endpoint ''/api/v1/agents'' is...

7.5CVSS6.6AI score0.00255EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/12/20 12:12 a.m.11 views

CVE-2025-63665

An issue in GT Edge AI Community Edition Versions before v2.0.12 allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS7.8AI score0.00428EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/19 6:31 p.m.4 views

EUVD-2025-204583

An issue in GT Edge AI Platform Versions before v2.0.10-dev allows attackers to execute arbitrary code via injecting a crafted JSON payload into the Prompt window...

9.8CVSS7.3AI score0.00428EPSS
Exploits0References3
Rows per page
Query Builder