What the vulnerability does
01Description
Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity.
CVSS base score
—
Key dates
02Disclosure timeline
January 16, 2024
CVE published
June 11, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2023-21437
CVE-2022-1349 WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOR
CVE-2023-37918 API token authentication bypass in HTTP endpoints in Dapr
CVE-2020-15164 Authentication Bypass in Scratch Login (mediawiki-scratch-login)
CVE-2025-46548 Apache Pekko Management, Apache Pekko Management, Apache Pekko Management, Akka Management, Akka Management, Akka Management: management API basic authentication is not effective
