> ZDI-25-852: (0Day) CData API Server MySQL Misconfiguration Information Disclosure Vulnerability
[DATE: 20/08/2025 05:00]
[LANGUAGE: EN]
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CData API Server. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2025-9273.