CVE-2025-2339

MediumPublic PoC

Published: 16 March 2025

Published

16 March 2025

Modified

26 August 2025

KEV Added

—

Patch

—

CVSS Score v4 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Score 0.0014 33.5th percentile

Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-2339 is a medium-severity Improper Authentication (CWE-287) vulnerability in Otale Tale Blog. Its CVSS base score is 6.9 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 33.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and SA-22 (Unsupported System Components).

Deeper analysis

CVE-2025-2339 is a vulnerability classified as problematic in otale Tale Blog version 2.0.5, affecting an unknown part of the file /%61dmin/api/logs. The issue stems from improper authentication (CWE-287), with a CVSS v3.1 base score of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). It was published on 2025-03-16.

The vulnerability enables remote exploitation by unauthenticated attackers requiring low attack complexity and no user interaction. Successful manipulation allows attackers to bypass authentication, resulting in low-impact confidentiality disclosure with no effect on integrity or availability.

Advisories from VulDB (ctiid.299805, id.299805, submit.511578) and a GitHub repository detail the public disclosure of an exploit. The vendor was contacted early regarding the issue but provided no response, and the vulnerability impacts only products no longer supported by the maintainer. No patches or specific mitigations are referenced.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2025-6664

Vulnerability details

A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part of the file /%61dmin/api/logs. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit…

has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

CWE(s): CWE-287

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

attack.mitre.org →

Why these techniques?

The vulnerability in otale Tale Blog 2.0.5 enables remote attackers to bypass authentication and access the admin API logs endpoint (/admin/api/logs) without credentials, directly facilitating exploitation of a public-facing web application.