CVE-2025-54832CWE-472

OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification

Medium · published July 31, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of states and territories.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00368 · 29.5th percentile
Weakness
CWE-472 · External Control of Assumed-Immutable Web Parameter
Published
2025-07-31T17:25Z
EPSS history
Timeline
  • 31 JUL 17:25Z
    OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification
    cvelistv5