4.3
Medium
CVE-2025-24591 Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting…
Description
Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through <= 2.7.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GDPR CCPA Compliance Support 2.7 | earliest → 2.7.1 | No fix stated |
| GDPR CCPA Compliance Support 2.7 | earliest → 2.7.1 | No fix stated |