Lucene search
+L

26480 matches found

EUVD
EUVD
•added 2025/12/22 9:30 p.m.•19 views

EUVD-2025-204739

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS6.3AI score0.00287EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•20 views

EUVD-2025-204740

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

5.8AI score0.00302EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/22 9:30 p.m.•23 views

EUVD-2025-204736

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/22 7:15 p.m.•20 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/22 7:15 p.m.•16 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•25 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•15 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS0.00302EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/22 7:15 p.m.•19 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS0.00287EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/22 7:15 p.m.•20 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•36 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

0.00287EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•23 views

PT-2025-52672

Name of the Vulnerable Software and Affected Versions GT Edge AI Platform versions prior to 2.0.10 Description An access control issue exists in the /api/v1/conversations//files API of GT Edge AI Platform. This allows unauthorized access to files uploaded by other users. The vulnerable parameter ...

7.5CVSS6.8AI score0.00287EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/12/22 12:00 a.m.•41 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

0.00302EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/22 12:00 a.m.•9 views

CVE-2025-63663

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

5.8AI score0.00287EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/22 12:00 a.m.•11 views

CVE-2025-63664

Incorrect access control in the /api/v1/conversations//messages API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access other users' message history with AI agents...

5.8AI score0.00287EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/22 12:00 a.m.•54 views

CVE-2025-63663

The GT Edge AI Platform is vulnerable to an improper access control issue in the /api/v1/conversations/*/files API endpoint, affecting versions prior to v2.0.10 . The root cause is an insufficient check on the file identifier parameter, which allows unauthorized attackers to access files uploaded...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/12/22 12:00 a.m.•24 views

GT Edge AI 安全漏洞

GT Edge AI is an edge AI solution from US-based GT Edge AI. A security vulnerability exists in GT Edge AI versions prior to v2.0.10, which stems from improper access control of the /api/v1/conversations//files API, which could lead to unauthorized access to other user files...

7.5CVSS6.6AI score0.00287EPSS
SaveExploits0References3
CVE
CVE
•added 2025/12/22 12:00 a.m.•66 views

CVE-2025-63664

The GT Edge AI Platform is vulnerable to an improper access control flaw in versions prior to v2.0.10-dev . This vulnerability exists within the /api/v1/conversations/*/messages API endpoint, specifically involving the conversations and messages variables. An unauthorized attacker can exploit thi...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2025/12/22 12:00 a.m.•34 views

CVE-2025-63662

The GT Edge AI Platform is vulnerable to unauthorized access of sensitive information due to insecure permissions in the /api/v1/agents API. This flaw affects versions prior to v2.0.10-dev . Exploitation details are not provided in the documents. To remediate this vulnerability, users should upda...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•5 views

CVE-2025-63662: Exposure of Sensitive Information to an Unauthorized Actor

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•4 views

CVE-2025-63663: Improper Access Control

Incorrect access control in the /api/v1/conversations//files API of GT Edge AI Platform before v2.0.10 allows unauthorized attackers to access other users' uploaded files...

7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
Rows per page
Query Builder