CVE-2025-12523 is a vulnerability involving broken object level authorization in a users configuration endpoint, which allows an authenticated user to disclose information they should not access. The flaw impacts confidentiality but does not affect integrity or availability. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity level.