CVE-2025-62362

gpp-burgerportaal is a Dutch government citizen portal application. In versions before 2.0.3, 3.0.2, and 4.0.1, the name and email address of employees who publish content are exposed in network responses and can be discovered by viewing the browser's developer tools network tab. This information disclosure may violate employee privacy expectations and could be used for targeted attacks or unwanted contact. This issue has been patched in versions 2.0.3, 3.0.2, and 4.0.1. No known workarounds exist.

CVSS

No CVSS.

References

Link	Resource
https://github.com/GPP-Woo/GPP-burgerportaal/security/advisories/GHSA-pgg6-2865-2788

Configurations

No configuration.

History

08 Oct 2026, 12:10

Type	Values Removed	Values Added
Summary		(es) gpp-burgerportaal es una aplicación de portal ciudadano del gobierno holandés. En versiones anteriores a la 2.0.3, 3.0.2 y 4.0.1, el nombre y la dirección de correo electrónico de los empleados que publican contenido quedan expuestos en las respuestas de red y pueden ser descubiertos al ver la pestaña de red de las herramientas de desarrollador del navegador. Esta revelación de información puede violar las expectativas de privacidad de los empleados y podría ser utilizada para ataques dirigidos o contacto no deseado. Este problema ha sido parcheado en las versiones 2.0.3, 3.0.2 y 4.0.1. No existen soluciones alternativas conocidas.

Information

Published : 2025-10-13 22:15

Updated : 2026-10-08 12:10

NVD link : CVE-2025-62362

Mitre link : CVE-2025-62362

CVE.ORG link : CVE-2025-62362

JSON object : View

Products Affected

No product.

CWE

CWE-359

Exposure of Private Personal Information to an Unauthorized Actor

{"id": "CVE-2025-62362", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62362", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T15:15:32.166901Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "GPP-Woo", "product": "GPP-burgerportaal", "versions": [{"status": "affected", "version": "< 2.0.3"}, {"status": "affected", "version": ">= 3.0.0-rc.0, < 3.0.2"}, {"status": "affected", "version": ">= 4.0.0-rc.0, < 4.0.1"}]}]}], "published": "2025-10-13T22:15:33.750", "references": [{"url": "https://github.com/GPP-Woo/GPP-burgerportaal/security/advisories/GHSA-pgg6-2865-2788", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-359"}]}], "descriptions": [{"lang": "en", "value": "gpp-burgerportaal is a Dutch government citizen portal application. In versions before 2.0.3, 3.0.2, and 4.0.1, the name and email address of employees who publish content are exposed in network responses and can be discovered by viewing the browser's developer tools network tab. This information disclosure may violate employee privacy expectations and could be used for targeted attacks or unwanted contact. This issue has been patched in versions 2.0.3, 3.0.2, and 4.0.1. No known workarounds exist."}, {"lang": "es", "value": "gpp-burgerportaal es una aplicaci\u00f3n de portal ciudadano del gobierno holand\u00e9s. En versiones anteriores a la 2.0.3, 3.0.2 y 4.0.1, el nombre y la direcci\u00f3n de correo electr\u00f3nico de los empleados que publican contenido quedan expuestos en las respuestas de red y pueden ser descubiertos al ver la pesta\u00f1a de red de las herramientas de desarrollador del navegador. Esta revelaci\u00f3n de informaci\u00f3n puede violar las expectativas de privacidad de los empleados y podr\u00eda ser utilizada para ataques dirigidos o contacto no deseado. Este problema ha sido parcheado en las versiones 2.0.3, 3.0.2 y 4.0.1. No existen soluciones alternativas conocidas."}], "lastModified": "2026-10-08T12:10:00.217", "sourceIdentifier": "security-advisories@github.com"}