Description
An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password reset API endpoint that fails to validate the identity of the requester properly
Critical · 9.8
CVE-2025-52395
EUVD-2025-25451GHSA-9fxx-gw59-q7w5
An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password reset API endpoint …
Published Aug 21, 2025 · Updated Aug 21, 2025 · Assigned by mitre