Vulnerabilities > CVE-2025-28874 - Authorization Bypass Through User-Controlled Key vulnerability in Shanebp BP Email Assign Templates

047910
CVSS 4.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
shanebp
CWE-639

Summary

Authorization Bypass Through User-Controlled Key vulnerability in shanebp BP Email Assign Templates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BP Email Assign Templates: from n/a through 1.6.

Vulnerable Configurations

Part Description Count
Application
Shanebp
1