CVE-2025-0083

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding

Medium · published August 26, 2025

CVSS v3.1
4.0
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

In multiple locations, there is a possible way to access content across user profiles due to URI double encoding. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00095 · 0.6th percentile
Published
2025-08-26T22:48Z
EPSS history
Timeline
  • 26 AUG 22:48Z
    In multiple locations, there is a possible way to access content across user profiles due to URI double encoding
    cvelistv5