Back to the CVE list
CVE-2025-52389

CVE-2025-52389

CVSS score

8.8

EPSS probability

—

Risk score

0.9

Published

1 y ago

OverviewPublic Exploits (2)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
ktr4ck3r/CVE-2025-52389
GitHub

An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows unauthenticated attackers to access sensitive data for other users via a crafted HTTP request.

Public PoCSource updated: 06.09.2025 21:43:38
G
milamrk/CVE-2025-52389
GitHub

An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request.

Public PoCSource updated: 04.09.2025 00:44:52

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-52389"