5.3Medium
CVE-2025-2595Forced Browsing Vulnerability in CODESYS Visualization
Description
An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.
Weakness (CWE):
CWE-425
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| CODESYS | CODESYS Visualization | 0.0.0.0 – < 4.8.0.0 |