Medium severity6.5NVD Advisory· Published Dec 10, 2025· Updated Jun 17, 2026
CVE-2025-52493
CVE-2025-52493
Description
PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from "password" to "text" using browser developer tools. This vulnerability is exploitable by administrative users who have access to the configuration page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:pagerduty:runbook_automation:*:*:*:*:*:*:*:*Range: <=2025-06-12
Patches
Vulnerability mechanics
References
4- github.com/carterross2/Vulnerability-Research/tree/main/CVE-2025-52493nvdThird Party Advisory
- www.pagerduty.com/platform/automation/nvdProduct
- www.pagerduty.com/security/disclosure/nvdProduct
- www.praetorian.comnvdNot Applicable
News mentions
0No linked articles in our index yet.