CVE-2025-12059
Deferred
Deferred - Pending Action
Sensitive Data Exposure via Access Control Flaw in Logo j-Platform
Publication date: 2026-02-11
Last updated on: 2026-06-04
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Logo Software Industry and Trade Inc. Logo j-Platform allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Logo j-Platform: from 3.29.6.4 before 3.34.8.9.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| logo_software_industry_and_trade_inc | logo_j-platform | From 3.29.6.4 (inc) to 13112025 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-538 | The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. |