GHSA-675q-66gf-gqg8Published
OneUptime is Vulnerable to Privilege Escalation via Login Response Manipulation
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-66028 · Microsoft / collected KEV context
cve-program · CVE-2025-66028
- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-675q-66gf-gqg8
- https://github.com/OneUptime/oneuptime/commit/3e72b2a9a4f50f98cf1f6cf13fa3e405715bb370
euvd · EUVD-2025-199750
- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-675q-66gf-gqg8
- https://github.com/OneUptime/oneuptime/commit/3e72b2a9a4f50f98cf1f6cf13fa3e405715bb370
nvd · CVE-2025-66028
- https://github.com/OneUptime/oneuptime/commit/3e72b2a9a4f50f98cf1f6cf13fa3e405715bb370
- https://github.com/OneUptime/oneuptime/security/advisories/GHSA-675q-66gf-gqg8
osv · GHSA-675q-66gf-gqg8
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.