An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes.
[ { "events": [ { "introduced": "6.1.0.11" }, { "fixed": "6.1.1.6" } ] } ]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54338.json"