CVE-2025-25968
MediumCVSS 6.0Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
The vulnerability in DDSN Interactive cm3 Acora CMS version 10.1.1 stems from improper access control. An editor-privileged user can access sensitive information, such as system administrator credentials, by force browsing the endpoint and exploiting the 'file' parameter. By referencing specific files (e.g., cm3.xml), attackers can bypass access controls, leading to account takeover and potential privilege escalation.
Risk Assessment
The risk for the organization includes the possibility of an attacker with low privileges taking over the administrator account, which could result in full compromise of the CMS system and access to sensitive data.
Recommendation
It is recommended to immediately update the cm3 Acora CMS to the latest version and implement strict access control to endpoints and parameters such as 'file' to prevent unauthorized access to sensitive files.
Original NVD description (English source)
DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator credentials, by force browsing the endpoint and exploiting the 'file' parameter. By referencing specific files (e.g., cm3.xml), attackers can bypass access controls, leading to account takeover and potential privilege escalation.