CVSS 3.1 Score 8.8 of 10 (high)


Published Feb 9, 2024
Updated: Feb 15, 2024


CVE-2024-25677 is a cyber vulnerability that affects Min before version 1.31.0. The vulnerability allows local files to improperly request cross-origin resources, such as requesting other local files through an XML document. It has a high severity rating with a base score of 8.8 and impacts both confidentiality and integrity. The exploitability score is 2.8, indicating a moderate level of difficulty for attackers to exploit this vulnerability. The potential danger it poses to an organization is significant, as it can lead to unauthorized access and exposure of sensitive information. To remediate this vulnerability, organizations should update their Min software to version 1.31.0 or later to ensure proper treatment of local files as unique security origins and prevent cross-origin resource requests from occurring.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-25677 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options