CVE-2025-0745

Published: 2025-01-30T12:15Z

Last Modified: 2025-02-18T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the "/embedai/app/uploads/database/<SQL_FILE>" endpoint. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt