CVE-2025-24316
The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.30%
- CWE
- CWE-213
- Published
- 2025-02-28
- Last modified
- 2026-03-12
Affected products
- Dario Health Dario Application Database and Internet-based Server Infrastructure
Weakness type
Related vulnerabilities
- CVE-2026-55425 — Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields
- CVE-2026-56538 — HCL Connections is vulnerable to information disclosure
- CVE-2026-6280 — Improper Access Control in Nomysoft Informatics' Nomysem
- CVE-2025-52603 — HCL Connections is vulnerable to information disclosure
- CVE-2025-54831 — Apache Airflow: Connection sensitive details exposed to users with READ permissions
- CVE-2024-49827 — IBM Concert Software information disclosure
- CVE-2025-4976 — Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- CVE-2025-32791 — Permission policy information leakage in Backstage permission system