CVE-2025-27561
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 15, 2025
Updated: Apr 16, 2025
CWE ID 639
Summary
CVE-2025-27561 is a newly identified vulnerability that allows unauthenticated attackers to manipulate the names of "rooms" for other users in a specific application. This issue can potentially lead to confusion and disorientation for affected users, as an attacker could rename rooms at will. This vulnerability poses a risk to security and privacy, as users may be unable to distinguish between genuine and maliciously renamed rooms. It is recommended that affected users update their software as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cloud Applications