PT-2025-31565 · Opexus · Opexus Foiaxpress Public Access Link

Nathan Spidle · Published 2025-07-31 · Updated 2025-09-12 · CVE-2025-54832

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0

Description An authenticated user can add entries to the list of states and territories.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-472

Related Identifiers

CVE-2025-54832

Affected Products

Opexus Foiaxpress Public Access Link

References · 8

• https://osv.dev/vulnerability/CVE-2025-54832 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-54832 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-54832 · Security Note
• https://t.me/cveNotify/135312 · Telegram Post
• https://twitter.com/CVEnew/status/1950976240955126000 · Twitter Post
• https://docs.opexustech.com/docs/foiaxpress/11.12.0/FOIAXpress_Release_notes_11.12.3.0.pdf · Note
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-174-01.json · Note
• https://t.me/CVEtracker/28882 · Telegram Post