Medium severityNVD Advisory· Published May 29, 2025· Updated Apr 15, 2026
CVE-2025-48046
CVE-2025-48046
Description
An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.