4.3 Medium

CVE-2025-67470 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio…

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio and Projects portfolio-and-projects allows Retrieve Embedded Sensitive Data.This issue affects Portfolio and Projects: from n/a through <= 1.5.5.

Affected products and versions

Product	Affected versions	Fixed in
Portfolio and Projects 1.5	earliest → 1.5.5	No fix stated

Do you use Portfolio and Projects?

Track this CVE Watch Portfolio and Projects Check my SBOMs

www.cveye.io/en/cve/CVE-2025-67470

Timeline

Published December 9, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE