CVE-2025-1102

Summary

A CWE-346 "Origin Validation Error" in the CORS configuration in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to affect the device confidentiality, integrity, or availability via crafted URLs or HTTP requests.

Affected Software

Weaknesses

• CWE-346: CWE-346 Origin Validation Error

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-1102

• ←Previous
• Next→