CVE-2025-3113
CVSS 3.0 Score 7.5 of 10 (high)
Details
Published Apr 17, 2025
CWE ID 444
Summary
CVE-2025-3113 is a vulnerability affecting Continuous Compliance's application. Authenticated users with sufficient privileges and knowledge of the internal database configurations can exploit the Connector functionality. This allows them to access the internal database, explore its schema, and export data related to Connectors and Rule Sets. The vulnerability poses a risk to sensitive information and requires immediate attention for mitigation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.