PT-2025-44727

CVE-2025-12600

Published

2025-11-01

Updated

2025-11-01

Description by

CVSS 4.0

Critical

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions BLU-IC2 versions through 1.19.5 BLU-IC4 versions through 1.19.5

Description A malfunction exists in the Web UI when an unexpected locale is set via an API. The issue involves setting a locale through an API call, which leads to a Web UI malfunction. The API endpoint used is not specified. The vulnerable parameter or variable is not specified.

Recommendations Update BLU-IC2 to a version later than 1.19.5. Update BLU-IC4 to a version later than 1.19.5.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration