Back to Database
Status published
Medium
CVE-2025-54833
OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass
Vulnerability Description
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections. Unauthenticated remote attackers can more easily brute force passwords.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54833
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Nathan Spidle, CISA
References
More from OPEXUS
View All →CVE-2025-62586
OPEXUS FOIAXpress unauthenticated administrator password reset
High
8.9
CVE-2025-61999
OPEXUS FOIAXpress stored XSS via logo image
Medium
4.8
CVE-2025-61998
OPEXUS FOIAXpress stored XSS via Hyperlink Manager
Medium
4.8
CVE-2025-61997
OPEXUS FOIAXpress stored XSS via banner image
Medium
4.8
CVE-2025-61996
OPEXUS FOIAXpress stored XSS via annual report template
Medium
4.8
Affected Vendor
OPEXUS
View all reports →Affected Software
FOIAXpress Public Access Link (PAL)
Vulnerable Versions:
11.1.0, 11.12.3.0
Timeline
Official Publish:
July 31st, 2025
Last Modified:
August 7th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N