Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.

CVE-2025-2595 is a vulnerability identified in CODESYS Visualization, a component of the CODESYS software suite widely used for industrial automation and control systems. The vulnerability is classified under CWE-425, which pertains to Direct Request or Forced Browsing attacks. Specifically, this flaw allows an unauthenticated remote attacker to bypass the user management controls implemented in CODESYS Visualization. By exploiting this weakness, an attacker can directly request and access visualization template files or static elements without proper authorization. These visualization templates typically contain configuration data, UI layouts, or static content used to monitor and control industrial processes. The vulnerability arises because the application does not adequately enforce access control checks on direct URL requests to these resources, enabling forced browsing. The affected versions are not explicitly detailed beyond a placeholder version (0.0.0.0), but the vulnerability was publicly disclosed on April 23, 2025. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability's medium severity rating suggests that while it does not allow direct control or code execution, it can lead to unauthorized information disclosure, potentially aiding further attacks or reconnaissance within industrial control environments.

Detailed information about CVE-2025-2595: CWE-425: Direct Request ('Forced Browsing') in CODESYS CODESYS Visualization affecting CODESYS CODESYS Visualization. 

CVE-2025-2595: CWE-425: Direct Request ('Forced Browsing') in CODESYS CODESYS Visualization - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-2595: CWE-425: Direct Request ('Forced Browsing') in CODESYS CODESYS Visualization

Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only prevented listing the contents of hidden directories, not accessing individual hidden files or files in hidden directories (i.e. hidden files were 'hidden' but not 'inaccessible'). This could lead to notebook configurations allowing authenticated access to files that may reasonably be expected to be disallowed. Because fully authenticated requests are required, this is of relatively low impact. But if a server's root directory contains sensitive files whose only protection from the server is being hidden (e.g. `~/.ssh` while serving $HOME), then any authenticated requests could access files if their names are guessable. Such contexts also necessarily have full access to the server and therefore execution permissions, which also generally grants access to all the same files. So this does not generally result in any privilege escalation or increase in information access, only an additional, unintended means by which the files could be accessed. Version 6.4.12 contains a patch for this issue. There are currently no known workarounds.

CVE-2022-29238 is a vulnerability identified in Jupyter Notebook versions prior to 6.4.12, related to the improper enforcement of access controls on hidden files and directories within the notebook server's root directory. Jupyter Notebook is a widely used web-based interactive computing environment that allows users to create and share documents containing live code, equations, visualizations, and narrative text. The vulnerability arises when the configuration parameter ContentsManager.allow_hidden is set to False, which is intended to prevent the listing of hidden files and directories. However, this setting only blocks directory listings and does not prevent direct authenticated requests to access individual hidden files or files within hidden directories. This behavior constitutes a form of forced browsing (CWE-425), where an authenticated user can guess or enumerate file names and access them directly, bypassing the intended visibility restrictions. The impact is limited to authenticated users, meaning that an attacker must have valid credentials to exploit this issue. The vulnerability does not grant privilege escalation or unauthorized access beyond what the authenticated user already possesses, but it provides an unintended method to access sensitive files that rely solely on being hidden for protection. For example, if the server's root directory includes sensitive hidden files such as SSH keys in ~/.ssh, these files could be accessed by any authenticated user if their names are guessable. Since authenticated users typically have execution permissions on the server, this vulnerability does not increase their privileges but exposes an additional attack surface. The issue was addressed in Jupyter Notebook version 6.4.12, which properly restricts access to hidden files. No known exploits are currently reported in the wild, and no effective workarounds exist apart from upgrading to the patched version.

Detailed information about CVE-2022-29238: CWE-425: Direct Request ('Forced Browsing') in jupyter notebook affecting jupyter notebook. Get real-time updates, te

CVE-2022-29238: CWE-425: Direct Request ('Forced Browsing') in jupyter notebook - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-29238: CWE-425: Direct Request ('Forced Browsing') in jupyter notebook

NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.

CVE-2025-27581 is a security vulnerability identified in the NIH Biomedical Research Informatics Computing System (BRICS) versions up to 14.0.0-67. The vulnerability is categorized under CWE-425, which pertains to Direct Request or Forced Browsing attacks. Specifically, this flaw allows users who do not possess the required 'InET' role to directly access the InET module by sending crafted HTTP requests to known endpoints within the BRICS application. This bypasses the intended access control mechanisms that should restrict module access based on user roles. The vulnerability arises from insufficient authorization checks on server-side endpoints, enabling unauthorized users to reach sensitive modules without proper authentication or role validation. Although no known exploits are currently reported in the wild, the flaw represents a significant risk because it exposes potentially sensitive biomedical research data or functionality to unauthorized users. The NIH BRICS platform is widely used for managing and sharing biomedical research data, making the integrity and confidentiality of its modules critical. The lack of a patch link suggests that a fix may not yet be publicly available or is pending release. The vulnerability was reserved in early March 2025 and published in late April 2025, indicating recent discovery and disclosure. Overall, this vulnerability is a classic example of an access control bypass via forced browsing, which can lead to unauthorized data access or manipulation if exploited.

Detailed information about CVE-2025-27581: CWE-425 Direct Request ('Forced Browsing') in NIH BRICS affecting NIH BRICS. Get real-time updates, technical details

Title	Severity	Type	Source	Date

Threats Tagged 'cwe-425-direct-request-forced-browsing'

Filter Threats

Threats Tagged 'cwe-425-direct-request-forced-browsing'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility