CVE-2025-32648
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 17, 2025
CWE ID 266
Summary
CVE-2025-32648 is an Incorrect Privilege Assignment vulnerability that puts Projectopia versions 5.1.16 and earlier at risk. This issue permits Privilege Escalation, granting unauthorized access to sensitive data or functions within the Projectopia platform. Users are advised to upgrade to the latest version to mitigate this vulnerability and secure their systems from potential attackers. Projectopia's misconfiguration in handling user permissions could lead to serious consequences, making it crucial for administrators to address this issue promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.