cleantalk
Vulnerabilities and Security Researches

StaffList, CVE-2025-32255

CVE, Research URL

CVE-2025-32255

Application

StaffList

Published on
Apr 04, 2025
Research Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ERA404 StaffList allows Retrieve Embedded Sensitive Data. This issue affects StaffList: from n/a through 3.2.6.
Affected versions
Min -, max 3.2.6.
Status
vulnerable