PT-2025-31565 · Opexus · Opexus Foiaxpress Public Access Link

Nathan Spidle · Publicado 2025-07-31 · Atualizado 2025-09-12 · CVE-2025-54832

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0

Description An authenticated user can add entries to the list of states and territories.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-472

Identificadores relacionados

CVE-2025-54832

Produtos afetados

Opexus Foiaxpress Public Access Link

Referências · 8

• https://t.me/cveNotify/135312 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-54832 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2025-54832 · Nota de Segurança
• https://twitter.com/CVEnew/status/1950976240955126000 · Publicação no Twitter
• https://docs.opexustech.com/docs/foiaxpress/11.12.0/FOIAXpress_Release_notes_11.12.3.0.pdf · Nota
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-174-01.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-54832 · Nota de Segurança
• https://t.me/CVEtracker/28882 · Publicação no Telegram