CVEvulnerability

CVE-2025-0743

4.3 MEDIUM Published 2025-01-30 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-284

Description

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint "/embedai/visits/show/<VISIT_ID>" to obtain information about the visits made by other users. The information provided by this endpoint includes IP address, userAgent and location of the user that visited the web page.

Affected configurations

• thesamur embedai (< 2.1)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References