← Database

CVE-2025-30389

HIGH CVSS: 8.7 Published: 2025-04-30 Modified: 2026-06-17

Description

Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.

Affected Platforms

Microsoft Azure Ai Bot Service

Weakness Type

CWE-285

References