An issue in continuous.software aangine v.2025.2 allows a remote attacker to obtain sensitive information via the excel-integration-service template download mo…

Published:

25 januari 2026 om 23:00:00

Alert date:

26 januari 2026 om 18:01:24

Source:

nvd.nist.gov

Enterprise Applications, Web Technologies

CVE-2025-67274 is a vulnerability in continuous.software aangine v.2025.2 that allows remote attackers to obtain sensitive information. The vulnerability affects multiple service endpoints including excel-integration-service template download module, integration-persistence-service job listing module, and portfolio-item-service data retrieval module. Remote attackers can exploit this issue to access sensitive information through these exposed endpoints. The vulnerability impacts the aangine software platform used for continuous software development processes.

Technical details

Mitigation steps:

Affected products:

continuous.software aangine