MEDIUM 6.5 NVD
CVE-2025-12523
Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user
References
This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-10-29 via NVD.
vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.