EZD RP vulnerabilities

2 known vulnerabilities in EZD RP from Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  EZD RP: Missing Authorization

  CVE-2025-4430May 14, 2025Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy

  Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in versions before 20.19 (published on 22nd August 2024).

• 8.8 High severity

  EZD RP: Incorrect Authorization

  CVE-2024-7265Aug 7, 2024Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy

  Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. This issue affects EZ