CVE-2025-8053: Insufficient access control vulnerability has been discovered in Opentext Flipper.

Published Oct 20, 2025

Updated

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges.

This issue affects Flipper: 3.1.2.

Affected Software

2 affected components

OpenText Flipper

OpenText Flipper=3.1.2

Remediation

Information

https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850532

Event History

Oct 20, 2025

CVE Published

via MITRE·07:55 PM

Data Sourced

via MITRE·07:55 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-8053?

CVE-2025-8053 is classified as a medium severity vulnerability due to insufficient access control configurations.

How do I fix CVE-2025-8053?

To fix CVE-2025-8053, review and adjust the access control settings in OpenText Flipper to ensure proper user privilege levels.

Who is affected by CVE-2025-8053?

CVE-2025-8053 affects users of OpenText Flipper, particularly those with low privilege accounts.

What can attackers do with CVE-2025-8053?

Attackers exploiting CVE-2025-8053 can interact with the backend API without sufficient privileges, potentially leading to unauthorized actions.

When was CVE-2025-8053 published?

CVE-2025-8053 was published on October 1, 2025.