CVE-2025-32256
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 862
Summary
CVE-2025-32256 is a Missing Authorization vulnerability affecting SurveyJS, a software solution from devsoftbaltic. The issue allows unauthorized access to functionality not properly constrained by Access Control Lists (ACLs). This vulnerability can be exploited by attackers to gain privileges beyond their intended scope, potentially resulting in data breaches or system compromise. SurveyJS versions from n/a to 1.12.20 are affected. Users are advised to update to a patched version as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.