CVE-2025-2652: SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listing
First published: Sun Mar 23 2025(Updated: )
A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple sub-directories are affected.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Employee and Visitor Gate Pass Logging System | ||
| SourceCodester Employee and Visitor Gate Pass Logging System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2652?
CVE-2025-2652 is classified as a problematic vulnerability due to its potential for information exposure.
How does CVE-2025-2652 affect the SourceCodester Employee and Visitor Gate Pass Logging System?
CVE-2025-2652 exposes information through directory listing in the SourceCodester Employee and Visitor Gate Pass Logging System.
What is the impact of exploiting CVE-2025-2652?
Exploiting CVE-2025-2652 can lead to unauthorized access to confidential information on the affected system.
How can I mitigate the risk of CVE-2025-2652?
To mitigate CVE-2025-2652, implement proper directory permissions and disable directory listing on the server.
Is there an update available to fix CVE-2025-2652?
As of now, there is no specific patch provided for CVE-2025-2652, so manual mitigation measures are recommended.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/author
- agent/source
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- vendor/sourcecodester
- canonical/sourcecodester employee and visitor gate pass logging system
- vendor/oretnom23
- version/sourcecodester employee and visitor gate pass logging system/1.0