Is CVE-2025-4430 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Naukowa I Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy Ezd Rp

CVE-2025-4430

Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 (published on 22nd August 2024).

Vulnerability class: Broken Access Control

EPSS: 0.003 (21.4th percentile) — read the EPSS interpretation.

Affected products

Naukowa I Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy Ezd Rp — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cvd@cert.pl (third-party-advisory)
cvd@cert.pl (product)

Frequently asked questions

What is CVE-2025-4430?: CVE-2025-4430 is a vulnerability in Naukowa I Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy Ezd Rp, classified under Missing Authorization. Published 2025-05-14.
Is CVE-2025-4430 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.