CVE-2025-45320

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-45320
A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/Directory%20Listing_Requester.pdf Exploit
https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/Directory%20Listing_Requester.pdf Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:lopalopa:online_service_management_portal:1.0:*:*:*:*:*:*:*
History

07 May 2025, 16:39

Type Values Removed Values Added
References () https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/Directory%20Listing_Requester.pdf - () https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/Directory%20Listing_Requester.pdf - Exploit
CPE cpe:2.3:a:lopalopa:online_service_management_portal:1.0:*:*:*:*:*:*:*
First Time Lopalopa online Service Management Portal
Lopalopa
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : 7.5 		v2 : unknown
v3 : 5.3

07 May 2025, 14:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CWE CWE-548
Summary
  • (es) Se encontró una vulnerabilidad de listado de directorios en el directorio /osms/Requester/ de Kashipara Online Service Management Portal V1.0.
References () https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/Directory%20Listing_Requester.pdf - () https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/Directory%20Listing_Requester.pdf -

05 May 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-05 16:15

Updated : 2025-05-07 16:39

NVD link : CVE-2025-45320

Mitre link : CVE-2025-45320

CVE.ORG link : CVE-2025-45320

JSON object : View

Products Affected

lopalopa

  • online_service_management_portal
CWE
NVD-CWE-noinfo CWE-548

Exposure of Information Through Directory Listing