CVE-2025-13252

Katalog CVE

CVSS 7.3 · High EPSS 0,33%

Kerentanan Use of Hard-coded Password. Skor CVSS 3.1 7.3 (High) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.

Rincian

Terbit di NVD

16 November 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

7.3 (High), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-259: Use of Hard-coded Password
CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,4% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/shsuishang/modulithshop/issues/2
• https://github.com/shsuishang/modulithshop/issues/2#issue-3580272472
• https://vuldb.com/?ctiid.332587
• https://vuldb.com/?id.332587
• https://vuldb.com/?submit.687685