high8.7
CVE-2025-48045
An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.
Impact
An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.