CVE-2025-26526CWE-863

Feedback response viewing and deletions did not respect Separate Groups mode

Medium · published February 24, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

Separate Groups mode restrictions were not factored into permission

checks before allowing viewing or deletion of responses in Feedback

activities.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00326 · 24.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-02-24T19:39Z
EPSS history
Timeline
  • 24 FEB 19:39Z
    Feedback response viewing and deletions did not respect Separate Groups mode
    cvelistv5