CVE-2025-4430 Information

Description

Unauthorized access to /api/Token/gettoken\ endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 (published on 22nd August 2024).

Reference

https://cert.pl/en/posts/2025/05/CVE-2025-4430/ https://www.gov.pl/web/ezd-rp