Insecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated attackers with low-level privileges to access other users' information via a crafted API request.
References
| Link | Resource |
|---|---|
| http://hub.com | Not Applicable |
| http://hubert.com | Not Applicable |
| https://github.com/carlos-artmann/vulnerability-research/tree/main/CVE-2025-65784 | Third Party Advisory Exploit |
Configurations
History
13 Feb 2026, 20:54
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Hubert
Hubert hub |
|
| CPE | cpe:2.3:a:hubert:hub:2.0.1.27.3:*:*:*:*:*:*:* | |
| References | () http://hub.com - Not Applicable | |
| References | () http://hubert.com - Not Applicable | |
| References | () https://github.com/carlos-artmann/vulnerability-research/tree/main/CVE-2025-65784 - Third Party Advisory, Exploit |
14 Jan 2026, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-918 |
13 Jan 2026, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-13 17:15
Updated : 2026-02-13 20:54
NVD link : CVE-2025-65784
Mitre link : CVE-2025-65784
CVE.ORG link : CVE-2025-65784
JSON object : View
Products Affected
hubert
- hub
CWE
CWE-918
Server-Side Request Forgery (SSRF)