Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted space_id, thread_id, and message_id parameters to the v1/space/{space_id}/thread/{thread_id}/message/{message_id} endpoint.
References
| Link | Resource |
|---|---|
| https://github.com/Secsys-FDU/CVE-2025-51869 |
Configurations
No configuration.
History
22 Jul 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-639 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
22 Jul 2025, 13:05
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
21 Jul 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-21 20:15
Updated : 2025-07-22 14:15
NVD link : CVE-2025-51869
Mitre link : CVE-2025-51869
CVE.ORG link : CVE-2025-51869
JSON object : View
Products Affected
No product.
CWE
CWE-639
Authorization Bypass Through User-Controlled Key