CNNVD-202510-2829 Information
CNNVD ID
CNNVD-202510-2829
Related CVE
- CNNVD Published: 2025-10-22
Description (Chinese)
Nautobot Single Source of Truth是Nautobot开源的一个数据集成与同步插件。 Nautobot Single Source of Truth 3.10.0之前版本存在访问控制错误漏洞，该漏洞源于未经验证的攻击者可访问配置页面，可能导致信息泄露。
Description (English)
Nautobot Single Source of Truth is a data set integration and synchronization plugin for Nautobot open source. The previous version of Nautobot Single Source of Truth 3.10.0 had an access control error that originated from unverified assailants ’ access to configuration pages and could lead to the disclosure of information.
Hazard Level
High
Vulnerability Type
访问控制错误
Affected Vendor
Nautobot
Published
2025-10-22
Last Modified
2026-02-24
References
https://github.com/nautobot/nautobot-app-ssot/commit/1530d25cdeb929641ec47644f9a0a1d9d41e1cb8 https://github.com/nautobot/nautobot-app-ssot/releases/tag/v3.10.0 https://github.com/nautobot/nautobot-app-ssot/security/advisories/GHSA-535g-62r7-cx6v https://access.redhat.com/security/cve/cve-2025-62607
Patch
https://github.com/nautobot/nautobot-app-ssot/releases
Share on: