CVE-2025-60949 in Census CSWeb
요약 (영어)
Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments. A remote, unauthenticated attacker could send requests to configuration files and obtain leaked secrets. Fixed in 8.1.0 alpha.
책임이 있는
cisa-cg
예약하다
2025. 09. 26.
공개
2026. 03. 24.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 352593 | Census CSWeb Configuration config 정보 공개 | 200 | 개념 증명 | 공식 수정 | CVE-2025-60949 |