Vulnerability · Published Aug 18, 2025 · Assigned by VulDB
CVE-2025-9109Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy
Low 3.7
In plain English
A low-severity security flaw in i-Diario from Portabilis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Official description
A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Portabilis | i-Diario | 1.01.11.21.31.41.5.0 |
Weakness: CWE-204, CWE-203 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
References
- VDB-320431 | Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy vdb-entry
- VDB-320431 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #627926 | i-diario i-diario Password Reset Functionality 2.9 i-diario Password Reset Functionality third-party-advisory