CVE-2025-51497: adguard for safari

csirt@kutim:~/threat-intel/cve/CVE-2025-51497

CVSS 5.5 · Medium EPSS 0,15%

Kerentanan Insertion of Sensitive Information into Log File pada adguard for safari. Skor CVSS 3.1 5.5 (Medium) menurut CISA ADP.

Deskripsi (NVD)

An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS. AdGaurd verbosely logged each url that Safari accessed when the plugin was active. These logs went into the MacOS general logs for any unsandboxed process to read. This may be disabled in version 1.11.22.

Rincian

Terbit di NVD: 17 Juli 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.5 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-532: Insertion of Sensitive Information into Log File
EPSS (30 hari): 0,15% peluang dieksploitasi; lebih tinggi dari 3,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
adguard	adguard for safari	Semua versi sebelum 1.11.22

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.mcrich23.com/post/adguard-messed-up-their-logging advisory pihak ketiga
https://adguard.com/en/adguard-safari/overview.html product
https://github.com/AdguardTeam/AdGuardForSafari product

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.