PT-2025-30335 · Liner · Liner

CVE-2025-51869 · Published 2025-07-21 · Updated 2025-07-21

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Liner versions through 2025-06-03

Description An Insecure Direct Object Reference (IDOR) vulnerability exists that allows attackers to gain sensitive information. The vulnerability is exploitable through crafted space id, thread id, and message id parameters. The /v1/space/{space id}/thread/{thread id}/message/{message id} API endpoint is affected.

Recommendations Versions through 2025-06-03: Implement robust access controls to prevent unauthorized access to resources based on space id, thread id, and message id parameters.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-51869

Affected Products

Liner

References · 3

• 🔥 https://github.com/Secsys-FDU/CVE-2025-51869 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51869 · Security Note
• https://twitter.com/CVEnew/status/1947379222571585721 · Twitter Post