CVE-2025-9109 | Portabilis i-Diario up to 1.5.0 Password Recovery Endpoint /password/email observable response discrepancy

A vulnerability described as problematic has been identified in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation leads to observable response discrepancy.

This vulnerability is known as CVE-2025-9109. The attack can be launched remotely. Furthermore, there is an exploit available.