VULNERABILITY INTELLIGENCE

CVE-2025-49183

CVSS score7.5 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2025-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

All communication with the REST API is unencrypted (HTTP), allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references