Vulnerability Description
The users endpoint in the groov View API returns a list of all users and associated metadata including their API keys. This endpoint requires an Editor role to access and will display API keys for all users, including Administrators.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-32
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-04
- https://www.opto22.com/support/resources-tools/knowledgebase/kb91325
FAQ
What is CVE-2025-13084?
CVE-2025-13084 is a vulnerability with a CVSS score of 7.6 (HIGH). The users endpoint in the groov View API returns a list of all users and associated metadata including their API keys. This endpoint requires an Editor role to access and will display API keys for a...
How severe is CVE-2025-13084?
CVE-2025-13084 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13084?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.