CVE-2025-24843

Medium

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality,…

icscert·CWE-921·Published 2025-02-28

CVSS

5.1

EPSS

0.00

KEV

Exploits

cve.orgen

186 chars

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.

NVDen

186 chars

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.

Proceso de recuperación de archivos inseguro que facilita la posibilidad de manipulación de archivos para afectar la estabilidad del producto y la confidencialidad, integridad, autenticidad y certificación de los datos almacenados.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.1	—	—	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
3.1	Secondary	NVD	5.1	2.5	2.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
4.0	Primary	cve.org	5.1	—	—	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
4.0	Secondary	NVD	5.1	—	—	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X