CVE-2025-64245: Ryanpcmcquen Import External Attachments

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in ryanpcmcquen Import external attachments import-external-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Import external attachments: from n/a through <= 1.5.12.

Affected products

• Ryanpcmcquen Import External Attachments: up to and including 1.5.12

Published 2025-12-16. Last modified 2026-06-17.