CVE-2025-4430 — Unauthorized file manipulation in EZD RP

CVE-2025-4430

Unauthorized file manipulation in EZD RP PUBLISHED

Description (CNA)

Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 (published on 22nd August 2024).

Affected (CNA)

Vendor / product	Versions
Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy / EZD RP	affected 0 before 20.19

CWE

CWE-862

References

https://cert.pl/en/posts/2025/05/CVE-2025-4430/
https://www.gov.pl/web/ezd-rp

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.