CVE-2025-64637

15th percentile — higher than 15% of all known CVEs

In Auros Core versions up to and including 5.3.1, there is an unauthenticated content injection vulnerability. An attacker without authentication can modify application content.

The risk involves an attacker being able to inject malicious content, potentially leading to data theft, phishing, or reputational damage to the organization.

Immediately update Auros Core to a version later than 5.3.1 where the vulnerability is patched.