CVE-2022-25508 is an access control vulnerability in the /ManageRoute/postRoute component of FreeTAKServer v1.9.8, affecting the freetakserver-ui_project. This high-severity vulnerability (CVSS 7.5) allows unauthenticated attackers to cause a Denial of Service (DoS) by creating an excessive number of routes, or to inject unsafe or false routes for legitimate users. There is currently no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.9.8CPE matchmatch criteria | cpe:2.3:a:freetakserver-ui_project:freetakserver-ui:1.9.8:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.