Skip to main content

Placipy CVE-2026-25813

HIGH
Insertion of Sensitive Information into Log File (CWE-532)
2026-02-09 security-advisories@github.com
Information Disclosure Placipy
7.5
CVSS 3.1 · GitHub Advisory
Share

Severity by source

GitHub Advisory PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Feb 09, 2026 - 22:16 nvd
HIGH 7.5

DescriptionGitHub Advisory

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data directly to console output without masking or redaction.

AnalysisAI

Placipy versions up to 1.0.0 is affected by insertion of sensitive information into log file (CVSS 7.5).

Technical ContextAI

This vulnerability (CWE-532: Insertion of Sensitive Information into Log File) affects Placipy. PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data directly to console output without masking or redaction.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Placipy

View all
CVE-2026-25809 CRITICAL
9.8 Feb 09

PlaciPy placement system 1.0.0 has an improper authorization vulnerability enabling unauthenticated admin access — secon
CVE-2026-25814 CRITICAL
9.8 Feb 09

PlaciPy has an injection vulnerability allowing user input to be processed as commands — sixth critical flaw.
CVE-2026-25753 CRITICAL
9.8 Feb 06

PlaciPy placement management system 1.0.0 uses a hard-coded password, allowing any attacker who discovers it to gain ful
CVE-2026-25875 CRITICAL
9.8 Feb 09

PlaciPy has an incorrect authorization allowing privilege escalation — seventh and final critical vulnerability.
CVE-2026-25876 CRITICAL
9.1 Feb 09

PlaciPy has another missing authorization vulnerability — fourth of seven critical security flaws.
CVE-2026-25810 CRITICAL
9.1 Feb 09

PlaciPy has a missing authorization vulnerability — third of seven critical security flaws.
CVE-2026-25811 CRITICAL
9.1 Feb 09

PlaciPy has an incorrect authorization vulnerability — fifth of seven critical flaws.
CVE-2026-25812 HIGH
8.8 Feb 09

Placipy 1.0.0 fails to implement CSRF protections while permitting credentialed cross-origin requests, allowing unauthen
CVE-2026-25806 MEDIUM
6.5 Feb 09

PlaciPy is a placement management system designed for educational institutions. [CVSS 6.5 MEDIUM]

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

View all
CVE-2023-43261 HIGH POC
7.5
CVE-2025-24984 MEDIUM
4.6
CVE-2017-8075 CRITICAL POC
9.8
CVE-2017-8074 CRITICAL POC
9.8
CVE-2026-22778 CRITICAL POC
9.8
CVE-2019-17395 CRITICAL POC
9.8
CVE-2019-17398 CRITICAL POC
9.8
CVE-2019-17394 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2026-25813 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy