CVE Feed

    Dashboard / CVE / CVE-2025-54833

    CVE-2025-54833

    OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.

    Published:Jul 31, 2025
    Last Modified:Jan 23, 2026
    EPS:Jul 31, 2025
    EPSS Score:0.00029
    CVSS Score:5.3

    Affected Products

    Vendor
    Opexustech
    Product
    Foiaxpress Public Access Link

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-16 Dictionary-based Password Attack
    CAPEC-162 Manipulating Hidden Fields
    CAPEC-202 Create Malicious Client
    CAPEC-207 Removing Important Client Functionality
    CAPEC-208 Removing/short-circuiting 'Purse' logic: removing/mutating 'cash' decrements
    CAPEC-21 Exploitation of Trusted Identifiers
    CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies
    CAPEC-383 Harvesting Information via API Event Monitoring
    CAPEC-384 Application API Message Manipulation via Man-in-the-Middle
    CAPEC-385 Transaction or Event Tampering via Application API Manipulation
    CAPEC-386 Application API Navigation Remapping
    CAPEC-387 Navigation Remapping To Propagate Malicious Content
    CAPEC-388 Application API Button Hijacking
    CAPEC-49 Password Brute Forcing
    CAPEC-560 Use of Known Domain Credentials
    CAPEC-565 Password Spraying
    CAPEC-600 Credential Stuffing
    CAPEC-652 Use of Known Kerberos Credentials
    CAPEC-653 Use of Known Operating System Credentials

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High