Medium severity5.9NVD Advisory· Published May 16, 2025· Updated Jun 17, 2026
CVE-2025-2306
CVE-2025-2306
Description
An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sensitive documents without authentication, if the URL is known.
The attack requires the attacker to know the documents UUIDv4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.