medium4.3
CVE-2025-41404
Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier.
Impact
Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Irohasoft | Iroha Board | before 0.10.13 |