CVE-2025-53512 PUBLISHED CVSS 6.5 MEDIUM

The /log endpoint on a Juju controller lacked sufficient authorization checks, allowing unauthorized users to access debug messages that could contain sensitive information.

EPSS 0.08% · 22.9th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.08%
22.9th percentile

Affected Products

VendorProductVersions
canonicaljuju0, 3.0
CanonicalJuju2.0.0, 3.0.0
github.comjuju/juju0

Timeline

References

Open in Interactive Console →