CVE-2025-62362
MEDIUMgpp-burgerportaal <2.0.3, <3.0.2, <4.0.1 - Info Disclosure
Title source: llmDescription
gpp-burgerportaal is a Dutch government citizen portal application. In versions before 2.0.3, 3.0.2, and 4.0.1, the name and email address of employees who publish content are exposed in network responses and can be discovered by viewing the browser's developer tools network tab. This information disclosure may violate employee privacy expectations and could be used for targeted attacks or unwanted contact. This issue has been patched in versions 2.0.3, 3.0.2, and 4.0.1. No known workarounds exist.
Scores
CVSS v4
6.9
EPSS
0.0006
EPSS Percentile
18.6%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-359
Status
published
Products (3)
GPP-Woo/GPP-burgerportaal
< 2.0.3
GPP-Woo/GPP-burgerportaal
>= 3.0.0-rc.0, < 3.0.2
GPP-Woo/GPP-burgerportaal
>= 4.0.0-rc.0, < 4.0.1
Published
Oct 13, 2025
Tracked Since
Feb 18, 2026