CVE-2025-49183CWE-319
Unencrypted communication (HTTP)
High · published June 12, 2025
What it is
All communication with the REST API is unencrypted (HTTP), allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00310 · 22.6th percentile
- Weakness
- CWE-319 · Cleartext Transmission of Sensitive Information
- Published
- 2025-06-12T13:21Z
EPSS history
Timeline