CVE-2025-52493

CVSS 6.5 MEDIUMEPSS 0.3%CWE-200

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 dez 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actual secret values are present in the page source and can be revealed by simply modifying the input field type from "password" to "text" using browser developer tools. This vulnerability is exploitable by administrative users who have access to the configuration page.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

n/a · n/a

Referências

https://github.com/carterross2/Vulnerability-Research/tree/main/CVE-2025-52493 https://www.pagerduty.com/platform/automation/https://www.pagerduty.com/security/disclosure/https://www.praetorian.com