Vulnerabilities in BlueWave

3 results

CVE-2025-47817HIGHIn BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.EPSS 0.4%CVE-2025-47245HIGHIn BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.EPSS 0.4%CVE-2025-48024MEDIUMIn BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application secrets via the /api/v1/settings endpoint.EPSS 0.3%