VULNERABILITY INTELLIGENCE
CVE-2025-13084
CVSS score6.1 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2025-11-26
Last modified2026-10-18
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
Description
The users endpoint in the groov View API returns a list of all users and associated metadata including their API keys. This endpoint requires an Editor role to access and will display API keys for all users, including Administrators.
Weakness classification
- CWE-1230: Exposure of Sensitive Information Through Metadata