CVE-2025-41404 — iroha Soft Co., Ltd. / iroha Board

CVE-2025-41404

iroha Soft Co., Ltd. / iroha Board PUBLISHED

Description (CNA)

Direct request ('Forced Browsing') issue exists in iroha Board versions v0.10.12 and earlier. If this vulnerability is exploited, non-public contents may be viewed by an attacker who can log in to the affected product.

Affected (CNA)

Vendor / product	Versions
iroha Soft Co., Ltd. / iroha Board	affected versions v0.10.12 and earlier

CWE

CWE-425

References

https://irohaboard.irohasoft.jp/security/
https://jvn.jp/en/jp/JVN92520966/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.