CVE-2025-0733: Postman profapi.dll untrusted search path
Published Jan 27, 2025
·Updated
A vulnerability, which was classified as problematic, was found in Postman up to 11.20 on Windows. This affects an unknown part in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
1 affected component
Postman Postman<=11.20
Event History
Jan 27, 2025
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-0733?
CVE-2025-0733 is classified as a problematic vulnerability.
2
How do I fix CVE-2025-0733?
To address CVE-2025-0733, update Postman to a version higher than 11.20.
3
Which versions of Postman are affected by CVE-2025-0733?
CVE-2025-0733 affects all versions of Postman up to and including 11.20.
4
What type of vulnerability is CVE-2025-0733?
CVE-2025-0733 is characterized as an untrusted search path vulnerability.
5
Is CVE-2025-0733 exploitable remotely?
CVE-2025-0733 requires a local attack to be exploited.