CVE-2025-56527

High

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

mitre·CWE-256·Published 2025-11-18

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

75 chars

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

NVDen

75 chars

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N