medium5.3
CVE-2025-54834
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check fo…
Impact
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames. There are no rate-limiting mechanisms in place.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opexustech | Foiaxpress Public Access Link | from 11.1.0 before 11.12.3.0 |