PT-2025-38774 · Ideal Postcodes · Uk Address Postcode Validation

Christopher Blanchard + 1 · Publicado 2025-09-22 · Atualizado 2025-10-24 · CVE-2025-57923

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ideal Postcodes UK Address Postcode Validation versions through 3.9.2

Description A flaw exists in the UK Address Postcode Validation software that allows for the retrieval of embedded sensitive data through the insertion of sensitive information into sent data. The issue impacts the software’s ability to handle data securely during postcode validation processes.

Recommendations Update to a version later than 3.9.2.

Correção

Enumeração de Fraquezas

CWE-201

Identificadores relacionados

CVE-2025-57923

Produtos afetados

Uk Address Postcode Validation

Referências · 7

• https://t.me/cveNotify/140221 · Publicação no Telegram
• https://patchstack.com/database/wordpress/plugin/uk-address-postcode-validation/vulnerability/wordpress-uk-address-postcode-validation-plugin-3-9-2-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://patchstack.com/database/Wordpress/Plugin/uk-address-postcode-validation/vulnerability/wordpress-uk-address-postcode-validation-plugin-3-9-2-sensitive-data-exposure-vulnerability?_s_id=cve · Nota
• https://t.me/cveNotify/140125 · Publicação no Telegram
• https://web.archive.org/web/20250807222539/https://docs.ideal-postcodes.co.uk/docs/guides/api-key-secure · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-57923 · Nota de Segurança
• https://twitter.com/CVEnew/status/1970208018320228470 · Publicação no Twitter