CVE-2025-9109: Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy
A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9109?
The severity of CVE-2025-9109 is classified as medium due to the potential for response discrepancies affecting data integrity.
How do I fix CVE-2025-9109?
To fix CVE-2025-9109, upgrade Portabilis i-Diario to version 1.5.1 or later to eliminate the vulnerability.
What component is affected by CVE-2025-9109?
CVE-2025-9109 affects the Password Recovery Endpoint functionality of the Portabilis i-Diario application.
What type of vulnerability is CVE-2025-9109?
CVE-2025-9109 is a security flaw that results in observable response discrepancies within the application.
Does CVE-2025-9109 require authentication to exploit?
CVE-2025-9109 may be exploited without authentication, making it particularly concerning for exposed services.