CVE-2025-2222CWE-552

CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privilege escalation…

High · published April 9, 2025

CVSS v4.0
8.2
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak

information and potential privilege escalation following man in the middle attack.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00301 · 21.6th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2025-04-09T10:12Z
EPSS history
Timeline
  • 09 APR 10:12Z
    CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privilege escalation…
    cvelistv5