Vulnerabilities

TI-2025-30408 CVE-2025-48024 · GHSA-273c-54fq-2595

In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive…

LOW 23

In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application secrets via the /api/v1/settings endpoint.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00359 Published 2025-05-15 Fixed in 2.1 CWE-497

TI-2025-30270 CVE-2025-47817 · GHSA-q35g-37c5-hjjh

MEDIUM 41

In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00521 Published 2025-05-10 No fix listed CWE-472

TI-2025-29796 CVE-2025-47245 · GHSA-j7v6-9xg3-v59m

LOW 38

In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00508 Published 2025-05-03 No fix listed CWE-472