VULNERABILITY INTELLIGENCE

CVE-2025-48042

EPSS probability0.34%
CISA KEVNot currently listed
Published2025-09-07
Last modified2026-10-19

Description

Incorrect Authorization vulnerability in ash-project ash allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ash: from 0.1.1 before 3.5.39.

Weakness classification

  • 6b3ad84c-e1a6-4bf7-a703-f496b71e49db: CWE-863

Primary references