ID:11229 - Exploit for Embedded malicious code (backdoor) in changed-files - CVE-2025-30066

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain unauthorized access to sensitive information.

The vulnerability exists due to presence of embedded malicious functionality in the application code (aka backdoor). A remote attacker can discover secrets by reading actions logs.

Note, the vulnerability is being exploited in the wild.

Remediation