CVE-2025-11439

Katalog CVE

CVSS 4.3 · Medium EPSS 0,35%

Kerentanan Missing Authorization pada jhumanj opnform. Skor CVSS 3.1 4.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in JhumanJ OpnForm up to 1.9.3. This issue affects some unknown processing of the file /show/integrations. Performing manipulation results in missing authorization. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The patch is named 11d97d78f2de2cb49f79baed6bde8b611ec1f384. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

8 Oktober 2025

Terakhir diubah

8 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization
CWE-863: Incorrect Authorization

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 27,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/JhumanJ/OpnForm/pull/900/commits/11d97d78f2de2cb49f79baed6bde8b611ec1f384 patch
• https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/edit?tab=t.0#heading=h.reuyi9l... exploit · advisory pihak ketiga
• https://vuldb.com/?id.327376 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.666880 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.327376 permissions required · vdb entry