Back to Database
Status published
Medium
CVE-2025-54832
OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification
Vulnerability Description
OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of states and territories.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54832
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Nathan Spidle, CISA
References
More from OPEXUS
View All →CVE-2025-62586
OPEXUS FOIAXpress unauthenticated administrator password reset
High
8.9
CVE-2025-61999
OPEXUS FOIAXpress stored XSS via logo image
Medium
4.8
CVE-2025-61998
OPEXUS FOIAXpress stored XSS via Hyperlink Manager
Medium
4.8
CVE-2025-61997
OPEXUS FOIAXpress stored XSS via banner image
Medium
4.8
CVE-2025-61996
OPEXUS FOIAXpress stored XSS via annual report template
Medium
4.8
Affected Vendor
OPEXUS
View all reports →Affected Software
FOIAXpress Public Access Link (PAL)
Vulnerable Versions:
11.1.0, 11.12.3.0
Timeline
Official Publish:
July 31st, 2025
Last Modified:
August 7th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.