CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-1091
Severity
MEDIUM
CVSS
4.3
EPSS
0.24%
Original NVD Description
A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known.