Threats tagged 'ghsa-8j4g-7p6h-w548'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.7%	CVE-2025-34140ETQ Reliance (legacy CG · Authorization Bypass Vulnerability Exists High8.7EPSS 0.7%2025-07-22GCVE DatabaseCVE-2025-34140 CVE-2025-34140 is an authorization bypass vulnerability in ETQ Reliance legacy CG and NXG SaaS platforms. An unauthenticated attacker can bypass access control by appending a specific URI suffix to certain API endpoints, allowing retrieval of limited sensitive resources. The issue was caused by a misconfiguration in the API authorization logic and has been corrected in versions SE.2025.1 and 2025.1.2. EPSS 0.7%Report on CVE-2025-34140 Vulnerability CWE-639 #ghsa-8j4g-7p6h-w548	GCVE Database	2025-07-22

Page 1 of 1