CVE-2025-24502

An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by…

Medium · published January 30, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00221 · 12.0th percentile
Published
2025-01-30T18:24Z
EPSS history
Timeline
  • 30 JAN 18:24Z
    An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by…
    cvelistv5