CVE-2025-54542

Katalog CVE

CVSS 5.5 · Medium EPSS 0,14%

Kerentanan Use of HTTP Request With Sensitive Query String pada opensolution quick.cms. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to obtain the necessary credentials to log in as the user. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

Rincian

Terbit di NVD

28 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-598: Use of HTTP Request With Sensitive Query String

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 2,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cert.pl/posts/2025/08/CVE-2025-54540 advisory pihak ketiga
• https://opensolution.org product