Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-13084

Opto 22 groov View Exposure of Sensitive Information Through Metadata

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The users endpoint in the groov View API returns a list of all users and associated metadata including their API keys. This endpoint requires an Editor role to access and will display API keys for all users, including Administrators.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Opto 22 groov View Server

Default version status: unaffected

  • R1.0a to ≤ R4.5daffected

Opto 22 GRV-EPIC-PR1 Firmware

Default version status: unaffected

  • 0 to ≤ 4.0.3affected

Opto 22 GRV-EPIC-PR2 Firmware

Default version status: unaffected

  • 0 to ≤ 4.0.3affected

References