CVE-2025-30389
CVSS 3.1 Score 9.8 of 10 (CRITICAL)
Attack Complexity
LOW
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Scope
UNCHANGED
Privileges Required
NONE
Summary
CVE-2025-30389 is a cybersecurity vulnerability affecting the Azure Bot Framework SDK. This issue involves a lack of proper authorization controls, enabling unauthorized attackers to elevate their privileges over a network. Successful exploitation of this vulnerability could result in serious security consequences, including unauthorized access to sensitive data or system takeover. The Azure Bot Framework SDK should be updated to the latest version to address this vulnerability and mitigate potential risks. Organizations utilizing this SDK are strongly advised to implement additional security measures, such as network segmentation and access controls, to further protect their networks.
Details
- Published: formatDate( 2025-04-30T18:15:46.330 )
- Updated: formatDate( 2025-05-12T19:43:12.623 )
- CWE ID: CWE-285