CVE-2025-62895CWE-201

CVE-2025-62895

Medium 路 published October 27, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

鈿狅笍 A little oversight could lead to a big leak! The Atarim visual collaboration tool allows sensitive information to sneak into sent data, like a chef accidentally leaving a secret ingredient in a takeout order! Think of it like sending a care package that includes a personal letter meant for your eyes only. If the receiver accidentally shares that package with someone else, all that sensitive information could be out in the open! An attacker could potentially retrieve sensitive data embedded in the sent information, risking exposure of confidential details. While not an immediate catastrophe, it could lead to privacy breaches and loss of trust from users or clients.

Put simply

Think of it like sending a care package that includes a personal letter meant for your eyes only. If the receiver accidentally shares that package with someone else, all that sensitive information could be out in the open! This vulnerability arises from the improper handling of sensitive information within Atarim versions up to 4.2.1, allowing it to be embedded in data sent out to users or systems.

What to do

An attacker could potentially retrieve sensitive data embedded in the sent information, risking exposure of confidential details. While not an immediate catastrophe, it could lead to privacy breaches and loss of trust from users or clients. To fix this, ensure you're using Atarim version 4.2.2 or newer. Review your data handling practices and ensure sensitive information is stripped out before sending anything. Conduct a thorough audit of your exposed data paths. You've got this! By taking these steps, you'll be a security hero, keeping your sensitive information safe! 馃Ω鈥嶁檪锔忦煕★笍

The record
Technical detail
CVSS v3.1
5.3 路 MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 路 22.2th percentile
Weakness
CWE-201 路 Insertion of Sensitive Information Into Sent Data
Published
2025-10-27T06:15Z
References (1)
EPSS history
Timeline
  • 27 OCT 01:33Z
    WordPress Atarim plugin <= 4.2.1 - Sensitive Data Exposure vulnerability
    cvelistv5