CVE-2025-0472 — Information exposure vulnerability in PMB platform

CVE-2025-0472

Information exposure vulnerability in PMB platform PUBLISHED

Description (CNA)

Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response.

Affected (CNA)

Vendor / product	Versions
PMB Services / PMB platform	affected 0 through 4.2.13

CWE

CWE-200

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-pmb-platform

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.