CyberRota Analysis
This vulnerability has an unknown severity rating. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-48046
Severity
UNKNOWN
CVSS
N/A
EPSS
0.47%
Original NVD Description
An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.