Incorrect access control in the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5, version 6.13.11 allows attackers with low-level privileges to read server logs.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-65239.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "6.13.11" } ] } ]