CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-0741: Improper Access Control vulnerability in EmbedAI
5.8
CVSS
Description
An Improper Access Control vulnerability has been found in EmbedAI
2.1 and below. This vulnerability allows an authenticated attacker to write messages into other users chat by changing the parameter "chat_id" of the POST request "/embedai/chats/send_message".
Classification
CVE ID: CVE-2025-0741
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.8
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Affected Products
Vendor: EmbedAI
Product: EmbedAI
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.77% (scored less or equal to compared to others)
EPSS Date: 2025-02-28 (when was this score calculated)