Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-54833

OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass

Description

OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OPEXUS FOIAXpress Public Access Link (PAL)

Default version status: unknown

  • 11.1.0 to < 11.12.3.0affected
  • 11.12.3.0unaffected

References