CVE-2025-58591
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
A remote, unauthorized attacker can brute force folders and files and read them, such as private keys or configurations, making the application vulnerable to gathering sensitive information.
Risk Assessment
An attacker may gain access to sensitive information such as private keys or configurations, potentially leading to further security breaches.
Recommendation
Restrict access to sensitive files and directories, implement access controls, and update the application to a patched version.
Other vulnerabilities in Aplikacja (nieokreślona)
See all- CVE-2025-58587Medium
The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.
- CVE-2025-58586Medium
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.
Original NVD description (English source)
A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS