Threats tagged 'ghsa-xch9-h8qw-85c7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.4%	CVE-2025-54291github.com/canonical/lxd · Canonical LXD Project Existence Determination Through Error Handling in Image Get Function Medium6.9EPSS 0.4%2025-10-02GCVE DatabaseCVE-2025-54291 CVE-2025-54291 is an information disclosure vulnerability in Canonical's LXD API allowing unauthenticated users to determine the existence of projects by observing differing HTTP status codes returned from the /1.0/images endpoint. The API returns a 404 error for non-existent projects and a 403 error for existing projects without viewing permissions. This behavior leaks project existence information but does not expose project resource details. The issue is fixed in LXD versions 5.21.4 and 6.5. EPSS 0.4%Report on CVE-2025-54291 Vulnerability CWE-209 #ghsa-xch9-h8qw-85c7 #go	GCVE Database	2025-10-02

Page 1 of 1