Contrast before 1.8.1 Information Disclosure via Logging

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-71425 · Microsoft / collected KEV context

EUVD-2025-211007

GHSA-7f88-pr8w-xgw6

GHSA-h5f8-crrq-4pw8

GO-2025-3718

cve-program · CVE-2025-71425

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8
• https://www.vulncheck.com/advisories/contrast-before-1.8.1-information-disclosure-via-logging

euvd · EUVD-2025-211007

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8
• https://www.vulncheck.com/advisories/contrast-before-1.8.1-information-disclosure-via-logging

nvd · CVE-2025-71425

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8
• https://www.vulncheck.com/advisories/contrast-before-1.8.1-information-disclosure-via-logging

osv · GHSA-h5f8-crrq-4pw8

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8
• https://github.com/edgelesssys/contrast

osv · GO-2025-3718

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8

No related operational record is retained in the current change model.