CVE-2025-62895

MediumCVSS 5.3

Published: 27/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

21th percentile - higher than 21% of all known CVEs

Summary

The Atarim plugin up to version 4.2.1 inserts sensitive information into sent data, allowing retrieval of embedded sensitive data. The vulnerability affects the Atarim Visual Collaboration plugin.

Risk Assessment

Sensitive data could be intercepted during transmission, potentially leading to information leakage and privacy violations.

Recommendation

Update the Atarim plugin to a version newer than 4.2.1 and monitor transmitted data for leaks.

Other vulnerabilities in Atarim

CVE-2025-60187Medium
Unrestricted upload of dangerous file types in Atarim visual collaboration plugin up to version 4.2.1. Allows using malicious files.

Original NVD description (English source)

Insertion of Sensitive Information Into Sent Data vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Retrieve Embedded Sensitive Data.This issue affects Atarim: from n/a through <= 4.2.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS