CVE-2025-25586
CVSS 3.1 Score 4.2 of 10 (medium)
Details
Published Mar 18, 2025
Updated: Apr 1, 2025
CWE ID 538
Summary
CVE-2025-25586 is a newly disclosed information disclosure vulnerability affecting yimioa before version 2024.07.04. The issue lies within the /resources/application.yml component, which can potentially expose sensitive information when accessed under certain conditions. Attackers could exploit this vulnerability to gain unauthorized access to data, posing a significant risk to system security. Users are strongly advised to update to the latest version of yimioa to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.