CVE-2025-2339

A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-287

• https://github.com/qkdjksfkeg/cve_article/blob/main/Tale/Unauthorized.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.299805Permissions Required, VDB Entry
• https://vuldb.com/?id.299805Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.511578Third Party Advisory, VDB Entry
• https://github.com/qkdjksfkeg/cve_article/blob/main/Tale/Unauthorized.mdExploit, Third Party Advisory

Published

Mar 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-23384A vulnerability has been identified in RUGGEDCOM RM1224 LTE(…6.3
• CVE-2025-23385In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1…7.8
• CVE-2025-23386A Incorrect Default Permissions vulnerability in the openSUS…7.8
• CVE-2025-23387A Exposure of Sensitive Information to an Unauthorized Actor…5.3
• CVE-2025-23388A Stack-based Buffer Overflow vulnerability in SUSE rancher …8.2
• CVE-2025-23389A Improper Access Control vulnerability in SUSE rancher allo…8.4
• CVE-2025-23391A Incorrect Privilege Assignment vulnerability in SUSE ranch…9.1
• CVE-2025-23392A Improper Neutralization of Script-Related HTML Tags in a W…5.6
• CVE-2025-23393A Improper Neutralization of Script-Related HTML Tags in a W…5.6
• CVE-2025-23394A UNIX Symbolic Link (Symlink) Following vulnerability in op…9.8
• CVE-2025-23395Screen 5.0.0 when it runs with setuid-root privileges does n…7.8
• CVE-2025-23396A vulnerability has been identified in Teamcenter Visualizat…7.8