CVE-2025-0743

CVE-2025-0743 affects EmbedAI 2.1 and earlier. Affected component: the /embedai/visits/show/ endpoints, whose access control is insufficient, allowing an authenticated attacker to obtain information about other users’ visits (IP address, user agent, and location). This is described across multipl...

CVE-2025-0743 Improper Access Control vulnerability in EmbedAI

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint "/embedai/visits/show/" to obtain information about the visits made by other users. The information provided by this endpoint includes IP...