Vulnerability · Published Oct 24, 2025 · Assigned by VulnCheck

CVE-2025-34293GN4 Publishing System Insecure Direct Object Reference (IDOR) Information Disclosure

High 8.6

In plain English

A high-severity authorization bypass via user-controlled key in GN4 Publishing System from Naviga Global / Miles 33. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 4.0)8.6High

Exploit odds (30 days)0.4%top 63.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference (IDOR) vulnerability via the API. Authenticated requests to the API's object endpoints allow an authenticated user to request arbitrary user IDs and receive sensitive account data for those users, including the stored password and the account's security question and answer. The exposed recovery data and encrypted password may be used to reset or take over the target account.

Affected products (as reported)

Vendor	Product	Versions
Naviga Global / Miles 33	GN4 Publishing System	0 – before 2.6

Weakness: CWE-639 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

https://www.miles33.com/news/news/5955/naviga--miles-33--acquisition.html media-coverage, related
https://nne.navigacloud.com/GN4Help/gn4_introduction_to_gn4.htm product
https://www.miles33.com/section/14/gn4 product
https://www.vulncheck.com/advisories/gn4-publishing-system-idor-information-disclosure third-party-advisory