CVE-2025-26013
Published: 21 February 2025
Description
An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.
Security Summary
CVE-2025-26013 is an information disclosure vulnerability in Loggrove version 1.0, specifically within the read.py component. Published on 2025-02-21, the issue enables a remote attacker to obtain sensitive information. It carries a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) and is classified under CWE-540.
The vulnerability can be exploited by any remote attacker over the network, requiring low attack complexity, no privileges, and no user interaction. Successful exploitation grants high-impact access to sensitive information, with a low integrity impact but no effect on availability.
Mitigation details are available in the referenced advisory at https://gitee.com/olajowon/loggrove/issues/IBJSXS.
Details
- CWE(s)