CVE-2025-63663
Unauthorized File Access via IDOR
01Record
| Identifier | CVE-2025-63663 |
|---|---|
| Project | GT Edge AI Platform |
| Component | /api/v1/conversations/*/files |
| CWE | CWE-284 |
| CVSS | 7.5 |
| Disclosed | 2025-12-22 |
| Writeup | Link |
02Detail
Description: Incorrect access control in the /api/v1/conversations/*/files API endpoint allows attackers with knowledge of a user ID to access files uploaded by other users.
Impact: Information Disclosure
Discovered by Peyton Kennedy (p80n), Richard Medlin.