PT-2025-5508 · Unknown · Codection Import/Export Users/Customers
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
codection Import and export users and customers versions 1.27.12 and earlier
Description
The issue allows the insertion of sensitive information into externally-accessible files or directories, enabling the retrieval of embedded sensitive data.
Recommendations
For versions 1.27.12 and earlier, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to sensitive data and directories to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Codection Import/Export Users/Customers