CVE-2025-0783: pankajindevops scale API Endpoint access control

Severity: medium (CVSS 6.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-28 · updated 2026-06-17
Weakness: CWE-266

Description

A vulnerability, which was classified as problematic, was found in pankajindevops scale up to 20241113. This affects an unknown part of the component API Endpoint. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

Affected products

pankajindevops scale: 20241113

References

https://docs.google.com/document/d/1FCJveTlXtJd8EJRW2-LXwuhno92JaVt3_98Iqrdoc6M/edit?tab=t.0#heading=h.bbpri264qnth
https://drive.google.com/file/d/1KqzS5bMyPtgO9eIk_-que50tZU097RVi/view
https://vuldb.com/?ctiid.293907
https://vuldb.com/?id.293907
https://vuldb.com/?submit.480350

Get alerted when CVE-2025-0783 or the next vulnerability affects your stack