PT-2025-11621

CVE-2025-25586

·

Published

2025-03-18

·

Updated

2025-03-18

Description by

CVSS 3.1
4.2
Medium
MetricsAV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions yimioa versions prior to 2024.07.04
Description The issue is related to an information disclosure vulnerability. It affects the component /resources/application.yml.
Recommendations For versions prior to 2024.07.04, update to version 2024.07.04 or later to resolve the issue. As a temporary workaround, consider restricting access to the /resources/application.yml component until a patch is applied.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory
Related identifiers
CVE-2025-25586
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com