Home Β» CVE Watchtower

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

← Back to CVE List

CVE-2025-48046NVD

Description

An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint.
Severity Level
MEDIUM (5.3)
Published Date
29/05/2025
Last Modified
05/09/2025
Exploitation Status
UNKNOWN