VULNERABILITY INTELLIGENCE
CVE-2025-24502
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-01-30
Last modified2026-06-17
Description
An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-384