~ / search / GHSA-2h6j-mhcp-9j9h

GHSA-2h6j-mhcp-9j9h

GenieACS has an unauthenticated access vulnerability via the NBI API endpoint

Source: GitHub Advisory Database (reviewed) High CVE-2025-56015

Packages

EcosystemPackageAffectedFixed in
npm genieacs 1.2.13 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.

References

External links from the advisory. They lead to third-party sites.