medium5.3
CVE-2025-49995
Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments allows Exploiting Incorrectly Configured A…
Impact
Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Attachments: from n/a through <= 1.3.1.
Affected products
| Product | Affected versions |
|---|---|
| Download Attachments: From N/A Through | through 1.3.1. |
Versions were read from the advisory text. No structured product data has been published for this record yet.