{"id":"CVE-2025-12059","aliases":["EUVD-2025-207015","GHSA-cj2c-wh4j-hw39"],"status":"published","title":"Improper Access Control in Logo Software's Logo j-Platform","description":"Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00365,"percentile":0.30662,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-538"],"published":"2026-02-11T13:58:53Z","modified":"2026-06-17T08:31:38Z","products":[{"vendor":"logo software industry and trade inc.","product":"logo j-platform"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-26-0061","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0061","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12059"},{"url":"https://github.com/advisories/GHSA-cj2c-wh4j-hw39"}],"sources":{"cve":[{"id":"CVE-2025-12059","title":"Improper Access Control in Logo Software's Logo j-Platform","description":"Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9.","status":"published","published":"2026-02-11T13:58:53.142Z","modified":"2026-06-04T07:08:51.622Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-538"],"updated_at":"2026-11-02T14:32:42.078906Z"}],"euvd":[{"id":"EUVD-2025-207015","description":"Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9.","status":"published","published":"2026-02-11T13:58:53Z","modified":"2026-06-04T07:08:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:53.780241Z"}],"ghsa":[{"id":"GHSA-cj2c-wh4j-hw39","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in...","description":"Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Logo j-Platform: from 3.29.6.4 through 13112025.","status":"published","published":"2026-02-11T15:30:27Z","modified":"2026-06-04T09:31:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-538"],"updated_at":"2026-11-02T15:08:32.060893Z"}],"nvd":[{"id":"CVE-2025-12059","description":"Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels.\n\nThis issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9.","status":"published","published":"2026-02-11T15:16:12.47Z","modified":"2026-06-17T08:31:38.883Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-538"],"updated_at":"2026-11-02T14:12:00.273026Z"}]}}