CVE-2025-39513

Summary

CVE-2025-39513: ActiveDEMAND's Online Agency Marketing Automation platform contains a Missing Authorization vulnerability. The flaw permits unauthorized access to functionality that is not adequately controlled by Access Control Lists (ACLs). This issue potentially affects ActiveDEMAND versions from n/a through 0.2.46. Unauthorized users may exploit this vulnerability to gain unintended access to critical features, ultimately leading to potential data breaches or system disruptions. It is strongly recommended that affected organizations apply patches or upgrades as soon as possible to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.