EUVD-2025-19731

| CVE-2025-53108 MEDIUM
2025-07-02 [email protected]
Authentication Bypass
5.3
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None

Lifecycle Timeline

4
patch_available
Apr 16, 2026 - 05:29 EUVD
0.20.1
Analysis Generated
Mar 16, 2026 - 01:55 vuln.today
EUVD ID Assigned
Mar 16, 2026 - 01:55 euvd
EUVD-2025-19731
CVE Published
Jul 02, 2025 - 15:15 nvd
MEDIUM 5.3

DescriptionNVD

HomeBox is a home inventory and organization system. Prior to 0.20.1, HomeBox contains a missing authorization check in the API endpoints responsible for updating and deleting inventory item attachments. This flaw allows authenticated users to perform unauthorized actions on inventory item attachments that they do not own. This issue could lead to unauthorized data manipulation or loss of critical inventory data. This issue has been patched in version 0.20.1. There are no workarounds, users must upgrade.

AnalysisAI

A security vulnerability in HomeBox (CVSS 5.3) that allows authenticated users. Remediation should follow standard vulnerability management procedures.

Technical ContextAI

CWE-862 (Missing Authorization). Affects HomeBox.

RemediationAI

Monitor vendor channels for patch availability.

Share

EUVD-2025-19731 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy