Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-0637 EUVD-2025-1801GHSA-9jqm-f2xh-j4hp

Inadequate access control in Beta10

Published Jan 23, 2025 · Updated Feb 12, 2025 · Assigned by INCIBE

Description

It has been found that the Beta10 software does not provide for proper authorisation control in multiple areas of the application. This deficiency could allow a malicious actor, without authentication, to access private areas and/or areas intended for other roles. The vulnerability has been identified at least in the file or path ‘/app/tools.html’.

Affected products

VendorProductAffectedFixed
Beta10 Beta10 all versions —

References