CVE-2025-2652: SourceCodester Employee and Visitor Gate Pass Logging System exposure of information through directory listing
A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple sub-directories are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable directory listing in the affected SourceCodester Employee and Visitor Gate Pass Logging System (v1.0). This reduces exposure of information through directory listing in the affected sub-directories, which can be exploited remotely.
SourceCodester Employee and Visitor Gate Pass Logging System directory listing = disable
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2652?
CVE-2025-2652 is classified as a problematic vulnerability due to its potential for information exposure.
How does CVE-2025-2652 affect the SourceCodester Employee and Visitor Gate Pass Logging System?
CVE-2025-2652 exposes information through directory listing in the SourceCodester Employee and Visitor Gate Pass Logging System.
What is the impact of exploiting CVE-2025-2652?
Exploiting CVE-2025-2652 can lead to unauthorized access to confidential information on the affected system.
How can I mitigate the risk of CVE-2025-2652?
To mitigate CVE-2025-2652, implement proper directory permissions and disable directory listing on the server.
Is there an update available to fix CVE-2025-2652?
As of now, there is no specific patch provided for CVE-2025-2652, so manual mitigation measures are recommended.