Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-64744 State: PUBLISHED Published: 2025-11-13T20:30:20.960Z Last Updated: 2025-11-13T21:14:33.407Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: openobserve Products: openobserve Problem Types: CWE-79 Description: OpenObserve is a cloud-native observability platform. In versions up to and including 0.16.1, when creating or renaming an organization with HTML in the name, the markup is rendered inside the invitation email. This indicates that user-controlled input is inserted into the email template without proper HTML escaping. As of time of publication, no patched versions are available. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. As of time of publication, no patched versions are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openobserve/openobserve/security/advisories/GHSA-3jpx-57gj-w458
CVE ID: CVE-2025-64745 State: PUBLISHED Published: 2025-11-13T20:26:13.261Z Last Updated: 2025-11-13T21:20:30.228Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: withastro Products: astro Problem Types: CWE-79 Description: Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting (XSS) vulnerability exists in Astro's development server error pages when the `trailingSlash` configuration option is used. An attacker can inject arbitrary JavaScript code that executes in the victim's browser context by crafting a malicious URL. While this vulnerability only affects the development server and not production bui
context by crafting a malicious URL. While this vulnerability only affects the development server and not production builds, it could be exploited to compromise developer environments through social engineering or malicious links. Version 5.15.6 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/withastro/astro/security/advisories/GHSA-w2vj-39qv-7vh7 - https://github.com/withastro/astro/pull/12994 - https://github.com/withastro/astro/commit/790d9425f39bbbb462f1c27615781cd965009f91 - https://github.com/withastro/astro/blob/5bc37fd5cade62f753aef66efdf40f982379029a/packages/astro/src/template/4xx.ts#L133-L149
CVE ID: CVE-2025-64746 State: PUBLISHED Published: 2025-11-13T20:54:42.351Z Last Updated: 2025-11-13T21:19:01.907Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: directus Products: directus Problem Types: CWE-284, CWE-863 Description: Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.13.0, Directus does not properly clean up field-level permissions when a field is deleted. When a field is removed from a collection, its reference in the permissions table remains intact. This stale reference creates a security gap: if another field is later created using the same name, it inherits the outdated permission entr
creates a security gap: if another field is later created using the same name, it inherits the outdated permission entry. This behavior can unintentionally grant roles access to data they should not be able to read or modify. The issue is particularly risky in multi-tenant or production environments, where administrators may reuse field names, assuming old permissions have been fully cleared. Version 11.13.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-9x5g-62gj-wqf2 - https://github.com/directus/directus/commit/84d7636969083387164ce5d2fd15a65e11e2d0b8
CVE ID: CVE-2025-64747 State: PUBLISHED Published: 2025-11-13T21:13:42.627Z Last Updated: 2025-11-13T21:33:55.297Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: directus Products: directus Problem Types: CWE-20, CWE-79 Description: Directus is a real-time API and App dashboard for managing SQL database content. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 11.13.0 that allows users with `upload files` and `edit item` permissions to inject malicious JavaScript through the Block Editor interface. Attackers can bypass Content Security Policy (CSP) restrictions by combining file uploads with iframe srcdoc attributes, resulting i
n bypass Content Security Policy (CSP) restrictions by combining file uploads with iframe srcdoc attributes, resulting in persistent XSS execution. Version 11.13.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-vv2v-pw69-8crf - https://github.com/directus/directus/commit/d23525317f0780f04aa1fe7a99171a358e43cb2e
CVE ID: CVE-2025-64748 State: PUBLISHED Published: 2025-11-13T21:29:44.649Z Last Updated: 2025-11-13T21:39:43.765Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: directus Products: directus Problem Types: CWE-201 Description: Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked (`****`), successful matches can be detected through returned records, enabling enumeration attacks on sensitive data. Version 11.13.0 fixes the issue. Additional Analyst Notes: - CI
records, enabling enumeration attacks on sensitive data. Version 11.13.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-8jpw-gpr4-8cmh - https://github.com/directus/directus/commit/7737d56e096f95edfbdf861a3c08999ad31ce204
CVE ID: CVE-2025-64749 State: PUBLISHED Published: 2025-11-13T21:34:54.603Z Last Updated: 2025-11-14T17:15:38.905Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: directus Products: directus Problem Types: CWE-203, CWE-209 Description: Directus is a real-time API and App dashboard for managing SQL database content. An observable difference in error messaging was found in the Directus REST API in versions of Directus prior to version 11.13.0. The `/items/{collection}` API returns different error messages for two cases: when a user tries to access an existing collection which they are not authorized to access, and when user tries to access a non-existing colle
ccess an existing collection which they are not authorized to access, and when user tries to access a non-existing collection. The two differing error messages leak the existence of collections to users which are not authorized to access these collections. Version 11.13.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/directus/directus/security/advisories/GHSA-cph6-524f-3hgr - https://github.com/directus/directus/commit/f99c9b89071f9d136cc9b0d0c182f2d24542bc31
CVE ID: CVE-2025-64751 State: PUBLISHED Published: 2025-11-21T01:24:32.509Z Last Updated: 2025-11-24T18:11:03.949Z Vendors: openfga Products: openfga Problem Types: CWE-285 Description: OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1.11.0 ( openfga-0.1.34 <= Helm chart <= openfga-0.2.48, v.1.4.0 <= docker <= v.1.11.0) are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. This issue has been patched in version 1.11.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openfga/openfga/security/advisories/GHSA-2c64-v
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openfga/openfga/security/advisories/GHSA-2c64-vmv2-hgfc - https://github.com/openfga/openfga/releases/tag/v1.11.1
CVE ID: CVE-2025-64752 State: PUBLISHED Published: 2025-11-13T21:43:57.610Z Last Updated: 2025-11-14T17:10:33.307Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: gristlabs Products: grist-core Problem Types: CWE-918 Description: grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with access to any document on a Grist installation can use a feature for fetching from a URL that is executed on the server. The privileged network access of server-side requests could offer opportunities for attack escalation. This issue is fixed in version 1.7.7. The mitigation was to use the proxy for untrusted fetches intended for such purposes. As a wor
s fixed in version 1.7.7. The mitigation was to use the proxy for untrusted fetches intended for such purposes. As a workaround, avoid making http/https endpoints available to an instance running Grist that expose credentials or operate without credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gristlabs/grist-core/security/advisories/GHSA-qh95-2qv8-pqx3 - https://github.com/gristlabs/grist-core/releases/tag/v1.7.7
CVE ID: CVE-2025-64753 State: PUBLISHED Published: 2025-11-13T21:46:00.508Z Last Updated: 2025-11-14T16:17:23.927Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: gristlabs Products: grist-core Problem Types: CWE-863 Description: grist-core is a spreadsheet hosting server. Prior to version 1.7.7, a user with only partial read access to a document could still access endpoints listing hashes for versions of that document and receive a full list of changes between versions, even if those changes contained cells, columns, or tables to which the user was not supposed to have read access. This was fixed in version 1.7.7 by restricting the `/compare` endpoint to us
user was not supposed to have read access. This was fixed in version 1.7.7 by restricting the `/compare` endpoint to users with full read access. As a workaround, remove sensitive document history using the `/states/remove` endpoint. Another possibility is to block the `/compare` endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gristlabs/grist-core/security/advisories/GHSA-3v78-cw58-v685 - https://github.com/gristlabs/grist-core/releases/tag/v1.7.7
CVE ID: CVE-2025-64754 State: PUBLISHED Published: 2025-11-13T21:48:08.692Z Last Updated: 2025-11-14T16:03:57.905Z Vendors: jitsi Products: jitsi-meet Problem Types: CWE-601 Description: Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jitsi/jitsi-meet/security/advisories/GHSA-5fx7-wgcr-fj78
CVE ID: CVE-2025-64755 State: PUBLISHED Published: 2025-11-21T01:13:05.579Z Last Updated: 2025-11-24T18:13:06.459Z Vendors: anthropics Products: claude-code Problem Types: CWE-78 Description: Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/anthropics/claude-code/security/advisories/GHSA-7mv8-j34q-vp7q
CVE ID: CVE-2025-64756 State: PUBLISHED Published: 2025-11-17T17:29:08.029Z Last Updated: 2025-11-19T02:30:44.520Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: isaacs Products: node-glob Problem Types: CWE-78 Description: Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c <command> <patterns> are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger comman
, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2 - https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f - https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146
CVE ID: CVE-2025-64757 State: PUBLISHED Published: 2025-11-19T16:40:36.031Z Last Updated: 2025-11-19T21:04:23.556Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: withastro Products: astro Problem Types: CWE-22, CWE-23 Description: Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's development server that allows arbitrary local file read access through the image optimization endpoint. The vulnerability affects Astro development environments and allows remote attackers to read any image file accessible to the Node.js process on the host system. This issue has been patched in version 5.14.3. Additional
ge file accessible to the Node.js process on the host system. This issue has been patched in version 5.14.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/withastro/astro/security/advisories/GHSA-x3h8-62x9-952g - https://github.com/withastro/astro/commit/b8ca69b97149becefaf89bf21853de9c905cdbb7
CVE ID: CVE-2025-64758 State: PUBLISHED Published: 2025-11-17T17:24:27.491Z Last Updated: 2025-11-17T21:05:16.691Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: DependencyTrack Products: frontend Problem Types: CWE-79 Description: @dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEM_CONFIGURATION permission can configure a "welcome message", which is HTML that is to be rendered on the login page for branding purposes. When rendering the w
a "welcome message", which is HTML that is to be rendered on the login page for branding purposes. When rendering the welcome message, Dependency-Track versions before 4.13.6 did not properly sanitize the HTML, allowing arbitrary JavaScript to be executed. Users with the SYSTEM_CONFIGURATION permission (i.e., administrators), can exploit this weakness to execute arbitrary JavaScript for users browsing to the login page. The issue has been fixed in version 4.13.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DependencyTrack/frontend/security/advisories/GHSA-7xvh-c266-cfr5 - https://github.com/DependencyTrack/frontend/pull/1378 - https://github.com/Depen
curity/advisories/GHSA-7xvh-c266-cfr5 - https://github.com/DependencyTrack/frontend/pull/1378 - https://github.com/DependencyTrack/frontend/pull/986 - https://github.com/DependencyTrack/frontend/commit/8fd757be612eaf4f35eadbe4c334204d7bd711be
CVE ID: CVE-2025-64759 State: PUBLISHED Published: 2025-11-19T18:44:09.341Z Last Updated: 2025-11-19T21:14:41.116Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: homarr-labs Products: homarr Problem Types: CWE-20, CWE-434 Description: Homarr is an open-source dashboard. Prior to version 1.43.3, stored XSS vulnerability exists, allowing the execution of arbitrary JavaScript in a user's browser, with minimal or no user interaction required, due to the rendering of a malicious uploaded SVG file. This could be abused to add an attacker's account to the "credentials-admin" group, giving them full administrative access, if a user logged in as an administrator was t
to the "credentials-admin" group, giving them full administrative access, if a user logged in as an administrator was to view the page which renders or redirects to the SVG. This issue has been patched in version 1.43.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/homarr-labs/homarr/security/advisories/GHSA-wj62-c5gr-2x53 - https://github.com/homarr-labs/homarr/commit/aaa23f37321be1e110f722b36889b2fd3bea2059
CVE ID: CVE-2025-64761 State: PUBLISHED Published: 2025-11-25T00:01:17.986Z Last Updated: 2025-11-25T00:01:17.986Z Vendors: openbao Products: openbao Problem Types: CWE-266 Description: OpenBao is an open source identity-based secrets management system. Prior to version 2.4.4, a privileged operator could use the identity group subsystem to add a root policy to a group identity group, escalating their or another user's permissions in the system. Specifically this is an issue when: an operator in the root namespace has access to identity/groups endpoints and an operator does not have policy access. Otherwise, an operator with policy access could create or modify an existing policy to grant roo
not have policy access. Otherwise, an operator with policy access could create or modify an existing policy to grant root-equivalent permissions through the sudo capability. This issue has been patched in version 2.4.4. References: - https://github.com/openbao/openbao/security/advisories/GHSA-7ff4-jw48-3436 - https://github.com/openbao/openbao/pull/2143 - https://github.com/openbao/openbao/commit/16bb0ccd37a502930a289d434cbe4e7b4edd66e5
CVE ID: CVE-2025-64762 State: PUBLISHED Published: 2025-11-21T01:29:22.606Z Last Updated: 2025-11-24T18:09:43.225Z Vendors: workos Products: authkit-nextjs Problem Types: CWE-524 Description: The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enabled, this can result in session tokens being included in cached responses and subsequently served to multiple users. Next.js applications deployed on Vercel are unaffected unless they manually enable CDN caching b
rved to multiple users. Next.js applications deployed on Vercel are unaffected unless they manually enable CDN caching by setting cache headers on authenticated paths. Patched in authkit-nextjs 2.11.1, which applies anti-caching headers to all responses behind authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/workos/authkit-nextjs/security/advisories/GHSA-p8pf-44ff-93gf - https://github.com/workos/authkit-nextjs/commit/94cf438124993abb0e7c19dac64c3cb5724a15ea - https://github.com/workos/authkit-nextjs/releases/tag/v2.11.1
CVE ID: CVE-2025-64764 State: PUBLISHED Published: 2025-11-19T16:41:03.767Z Last Updated: 2025-11-19T21:07:23.867Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: withastro Products: astro Problem Types: CWE-80 Description: Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature is used in the targeted application, regardless of what was intended by the component template(s). This issue has been patched in version 5.15.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/withastro/astro/security/advisories/GHSA-wrwg-2hg8-v723 - https://github.com/withastro/ast
erences: - https://github.com/withastro/astro/security/advisories/GHSA-wrwg-2hg8-v723 - https://github.com/withastro/astro/commit/790d9425f39bbbb462f1c27615781cd965009f91
CVE ID: CVE-2025-64765 State: PUBLISHED Published: 2025-11-19T16:41:19.022Z Last Updated: 2025-11-20T15:50:41.540Z Vendors: withastro Products: astro Problem Types: CWE-22 Description: Astro is a web framework. Prior to version 5.15.8, a mismatch exists between how Astro normalizes request paths for routing/rendering and how the application’s middleware reads the path for validation checks. Astro internally applies decodeURI() to determine which route to render, while the middleware uses context.url.pathname without applying the same normalization (decodeURI). This discrepancy may allow attackers to reach protected routes using encoded path variants that pass routing but bypass validation ch
ncy may allow attackers to reach protected routes using encoded path variants that pass routing but bypass validation checks. This issue has been patched in version 5.15.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/withastro/astro/security/advisories/GHSA-ggxq-hp9w-j794 - https://github.com/withastro/astro/commit/6f800813516b07bbe12c666a92937525fddb58ce
CVE ID: CVE-2025-64766 State: PUBLISHED Published: 2025-11-17T21:38:10.023Z Last Updated: 2025-11-17T21:49:28.642Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: NixOS Products: nixpkgs Problem Types: CWE-798 Description: NixOS's Onlyoffice is a software suite that offers online and offline tools for document editing, collaboration, and management. In versions from 22.11 to before 25.05 and versions before Unstable 25.11, a hard-coded secret was used in the NixOS module for the OnlyOffice document server to protect its file cache. An attacker with knowledge of an existing revision ID could use this secret to obtain a document. In practice, an arbitrary revi
ker with knowledge of an existing revision ID could use this secret to obtain a document. In practice, an arbitrary revision ID should be hard to obtain. The primary impact is likely the access to known documents from users with expired access. This issue was resolved in NixOS unstable version 25.11 and version 25.05. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NixOS/nixpkgs/security/advisories/GHSA-58m4-5wg3-5g5v - https://github.com/NixOS/nixpkgs/pull/462100 - https://github.com/NixOS/nixpkgs/pull/462204 - https://github.com/NixOS/nixpkgs/commit/8e74d05e3de4ee5ad320cd585a7e0f12a4730869 - https://github.com/NixOS/nixpkgs/commit/cec38dec00df26a901eb8b4
ixpkgs/commit/8e74d05e3de4ee5ad320cd585a7e0f12a4730869 - https://github.com/NixOS/nixpkgs/commit/cec38dec00df26a901eb8b424d53bbb3bcc72eec
CVE ID: CVE-2025-64767 State: PUBLISHED Published: 2025-11-21T18:47:19.930Z Last Updated: 2025-11-21T19:01:11.833Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: dajiaji Products: hpke-js Problem Types: CWE-323 Description: hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. This issue has been patched in version 1.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment:
the produced messages. This issue has been patched in version 1.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/dajiaji/hpke-js/security/advisories/GHSA-73g8-5h73-26h4 - https://github.com/dajiaji/hpke-js/commit/94a767c9b9f37ce48d5cd86f7017d8cacd294aaf - https://github.com/dajiaji/hpke-js/blob/b7fd3592c7c08660c98289d67c6bb7f891af75c4/packages/core/src/senderContext.ts#L22-L34
CVE ID: CVE-2025-64770 State: PUBLISHED Published: 2025-11-20T20:25:44.401Z Last Updated: 2025-11-21T16:04:45.770Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: iCam365 Products: P201, QC021 Problem Types: CWE-306 Description: The affected products allow unauthenticated access to Open Network Video Interface Forum (ONVIF) services, which may allow an attacker unauthorized access to camera configuration information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-02 - https://icam365.net/en/aboutUs/ - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-324
02 - https://icam365.net/en/aboutUs/ - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-324-02.json