ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2025-0509
7.3высокая

CVE-2025-0509

Описание

A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks.

Затрагиваемое ПО
Sparkle-project SparkleNetapp Hci compute nodeNetapp Oncommand workflow automation
CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Источники
https://github.com/sparkle-project/Sparkle/pull/2550https://sparkle-project.org/documentation/security-and-reliability/https://security.netapp.com/advisory/ntap-20250124-0008/