Vulnerability Details CVE-2025-27590
In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.7%
CVSS Severity
CVSS v3 Score 9.0
References
Products affected by CVE-2025-27590
-
cpe:2.3:a:oxidized_web_project:oxidized_web:-
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.0.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.0.2
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.0.3
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.1.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.1.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.1.2
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.10.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.10.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.10.2
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.11.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.11.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.12.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.12.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.13.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.13.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.5.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.5.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.5.2
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.6.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.6.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.7.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.7.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.8.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.9.0
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.9.1
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.9.2
-
cpe:2.3:a:oxidized_web_project:oxidized_web:0.9.3