CVE-2025-14836

Katalog CVE

CVSS 2.7 · Low EPSS 0,20%

Kerentanan Cleartext Storage of Sensitive Information pada zzcms. Skor CVSS 3.1 2.7 (Low) menurut vuldb.com.

Deskripsi (NVD)

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_save.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Rincian

Terbit di NVD

17 Desember 2025

Terakhir diubah

13 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

2.7 (Low), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-312: Cleartext Storage of Sensitive Information
CWE-313: Cleartext Storage in a File or on Disk

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://note-hxlab.wetolink.com/share/bu2KYevoyBm6 advisory pihak ketiga
• https://vuldb.com/?id.336986 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.711654 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.336986 permissions required · vdb entry