Download Attachments, CVE-2025-49995

CVE, Research URL: CVE-2025-49995
Home page URL: Security reports for Download Attachments
Application: Download Attachments
Published on: Jun 20, 2025
Research Description: Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Download Attachments: from n/a through 1.3.1.
Affected versions: Min -, max 1.3.1.
Status: vulnerable