CVE-2025-62717

Katalog CVE

CVSS 9.1 · Critical EPSS 0,40%

Kerentanan Improper Authentication pada emlog. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit 1f726df.

Rincian

Terbit di NVD

24 Oktober 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/emlog/emlog/security/advisories/GHSA-wwj4-ppfj-hcm6 advisory vendor
• https://github.com/emlog/emlog/commit/1f726df0ce56a1bc6e8225dd95389974173bd0c0 patch