cve/2025/CVE-2025-54834.md
2025-09-29 21:09:30 +02:00

871 B

CVE-2025-54834

Description

OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames. There are no rate-limiting mechanisms in place.

POC

Reference

No PoCs from references.

Github