CVE-2025-26532CWE-863

Teachers can evade trusttext config when restoring glossary entries

Low · published February 24, 2025

CVSS v3.1
3.1
EPSS
0%
Percentile
17.2
In the wild
Unconfirmed
What it is

Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00263 · 17.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-02-24T20:05Z
EPSS history
Timeline
  • 24 FEB 20:05Z
    Teachers can evade trusttext config when restoring glossary entries
    cvelistv5