{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-4528","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","state":"PUBLISHED","assignerShortName":"VulDB","dateReserved":"2025-05-10T05:30:00.544Z","datePublished":"2025-05-11T03:00:06.849Z","dateUpdated":"2026-05-27T14:34:18.093Z"},"containers":{"cna":{"providerMetadata":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-05-27T14:34:18.093Z"},"title":"Dígitro NGC Explorer session expiration","problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-613","lang":"en","description":"Session Expiration"}]}],"affected":[{"vendor":"Dígitro","product":"NGC Explorer","versions":[{"version":"3.44.0","status":"affected"},{"version":"3.44.1","status":"affected"},{"version":"3.44.2","status":"affected"},{"version":"3.44.3","status":"affected"},{"version":"3.44.4","status":"affected"},{"version":"3.44.5","status":"affected"},{"version":"3.44.6","status":"affected"},{"version":"3.44.7","status":"affected"},{"version":"3.44.8","status":"affected"},{"version":"3.44.9","status":"affected"},{"version":"3.44.10","status":"affected"},{"version":"3.44.11","status":"affected"},{"version":"3.44.12","status":"affected"},{"version":"3.44.13","status":"affected"},{"version":"3.44.14","status":"affected"},{"version":"3.44.15","status":"affected"},{"version":"3.48.0","status":"affected"},{"version":"3.48.1","status":"affected"},{"version":"3.48.2","status":"affected"},{"version":"3.48.3","status":"affected"},{"version":"3.48.4","status":"affected"},{"version":"3.48.5","status":"affected"},{"version":"3.48.6","status":"affected"},{"version":"3.48.7","status":"affected"},{"version":"3.48.8","status":"affected"},{"version":"3.48.9","status":"affected"},{"version":"3.48.10","status":"affected"},{"version":"3.48.11","status":"affected"},{"version":"3.48.12","status":"affected"},{"version":"3.48.13","status":"affected"},{"version":"3.48.14","status":"affected"},{"version":"3.48.15","status":"affected"},{"version":"3.48.16","status":"affected"},{"version":"3.48.17","status":"affected"},{"version":"3.48.18","status":"affected"},{"version":"3.48.19","status":"affected"},{"version":"3.48.20","status":"affected"},{"version":"3.48.21","status":"affected"},{"version":"3.48.22","status":"unaffected"}],"cpes":["cpe:2.3:a:d_gitro:ngc_explorer:*:*:*:*:*:*:*:*"]}],"descriptions":[{"lang":"en","value":"A weakness has been identified in Dígitro NGC Explorer up to 3.44.15/3.48.21. This affects an unknown function. Executing a manipulation can lead to session expiration. The attack can be launched remotely. Upgrading to version 3.48.22 mitigates this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way."}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C"}}],"timeline":[{"time":"2025-05-10T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-05-10T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-27T16:38:18.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"j369 (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"references":[{"url":"https://vuldb.com/vuln/308273","name":"VDB-308273 | Dígitro NGC Explorer session expiration","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/308273/cti","name":"VDB-308273 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/565309","name":"Submit #565309 | Dígitro NGC Explorer 3.44.15 Improper session token expiration","tags":["third-party-advisory"]},{"url":"https://digitro.com/recomendacao-10-2026-ctir-gov/","tags":["patch"]},{"url":"https://www.gov.br/ctir/pt-br/assuntos/alertas-e-recomendacoes/recomendacoes/2026/recomendacao-10-2026","tags":["related"]}]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-12T14:33:25.278396Z","id":"CVE-2025-4528","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-12T14:33:36.562Z"}}]}}