Skip to content
OpenAdvisories
High · 7.6 CVE-2025-13084 EUVD-2025-199744

Opto 22 groov View Exposure of Sensitive Information Through Metadata

Published Nov 26, 2025 · Updated Nov 26, 2025 · Assigned by icscert

Description

The users endpoint in the groov View API returns a list of all users and
associated metadata including their API keys. This endpoint requires an
Editor role to access and will display API keys for all users,
including Administrators.

Affected products

VendorProductAffectedFixed
Opto 22 groov View Server R1.0a – ≤ R4.5d —
Opto 22 GRV-EPIC-PR1 Firmware ≤ 4.0.3 —
Opto 22 GRV-EPIC-PR2 Firmware ≤ 4.0.3 —

Advisories 1

References