CVE-2025-54551
BaseFortify
Publication date: 2025-08-20
Last updated on: 2025-08-20
Assigner: JPCERT/CC
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fujifilm | synapse_mobility | 8.0 |
| fujifilm | synapse_mobility | 8.0.2 |
| fujifilm | synapse_mobility | 8.1.1 |
| fujifilm | synapse_mobility | 8.1 |
| fujifilm | synapse_mobility | 8.0.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-472 | The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Synapse Mobility versions 8.0 through 8.1.1 allows a user to escalate their privileges by externally controlling a web parameter. Specifically, by altering the parameters of the search function, a user can gain access to data they are not authorized to view.
How can this vulnerability impact me? :
If exploited, this vulnerability can allow an attacker or unauthorized user to gain higher privileges within the system and access sensitive data that they should not have permission to see, potentially leading to data breaches or unauthorized information disclosure.