CVE-2025-58585
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.
Risk Assessment
An attacker can access confidential data without logging in, potentially leading to information leakage and facilitating further attacks.
Recommendation
Implement authentication for all endpoints containing sensitive data and conduct a security audit of the application.
Other vulnerabilities in Aplikacja webowa
See all- CVE-2026-41964High
CVE-2026-41964 describes a permission control vulnerability in a web application. Exploitation of this vulnerability may impact system availability.
- CVE-2026-6356Critical
A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information.
Original NVD description (English source)
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS