Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-41404 EUVD-2025-27987GHSA-gcxj-65c6-wcrg

Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-publi…

Published Jun 26, 2025 · Updated Jun 26, 2025 · Assigned by jpcert

Description

Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.

Affected products

VendorProductAffectedFixed
iroha Soft iroha Board versions v0.10.12 and earlier —

References