This vulnerability (CVE-2025-12059) affects Logo j-Platform versions starting from 3.29.6.4 before 3.34.8.9. It is classified under CWE-538, which involves the insertion of sensitive information into files or directories that are accessible externally. The root cause is incorrectly configured access control security levels, which may allow unauthorized access to sensitive data. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation could lead to unauthorized disclosure, modification, or deletion of sensitive information stored in files or directories accessible externally. Given the critical CVSS score, the impact on affected systems is severe, potentially compromising confidentiality, integrity, and availability of data managed by Logo j-Platform. No known active exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations on files and directories related to Logo j-Platform to prevent unauthorized external access.