CVE-2025-47580: Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security…

PriorityP350critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.24%

15.3th percentile

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through <= 3.2.35.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
etoilewebdesign	front_end_users	<= 3.2.32	—
rustaurius	front_end_users	<= 3.2.35	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.