CVE-2025-26138 in Systemic Risk Value
Riassunto
di MITRE • 18/03/2025
Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Uploaded files are accessible via a predictable numerical ID parameter, allowing unauthorized users to increment or decrement the ID to access and download files they do not have permission to view.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.