CVE-2025-9122

Name of the Vulnerable Software and Affected Versions Pentaho Data Integration and Analytics Community Dashboard Framework versions prior to 10.2.0.4 Pentaho Data Integration and Analytics Community Dashboard Framework versions 8.3.x Pentaho Data Integration and Analytics Community Dashboard Framework versions 9.3.0.x

Description The Pentaho Data Integration and Analytics Community Dashboard Framework reveals the complete server stack trace when an error occurs within the GetCdfResource servlet. This disclosure of sensitive information could potentially aid attackers in understanding the system's internal workings.

Recommendations Update to Pentaho Data Integration and Analytics Community Dashboard Framework version 10.2.0.4 or later. Update to a version later than 9.3.0.x. Update to a version later than 8.3.x.