CVE-2025-10423CWE-287CWE-804

CVE-2025-10423

Low · published September 15, 2025

CVSS v3.1
3.7
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been made public and could be used.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.3th percentile
Weaknesses
CWE-287 · Improper Authentication; CWE-804 · Guessable CAPTCHA
Published
2025-09-15T08:15Z
Affected products (1)
ProductVersionsFixed in
newbee-mall_project/newbee-mallall versions—
References (5)
https://github.com/newbee-ltd/newbee-mall/issues/101 · [email protected]https://github.com/newbee-ltd/newbee-mall/issues/101#issue-3380163659 · [email protected]https://vuldb.com/?ctiid.323857 · [email protected]https://vuldb.com/?id.323857 · [email protected]https://vuldb.com/?submit.647066 · [email protected]
EPSS history
Timeline
  • 15 SEP 03:02Z
    newbee-mall kaptcha mallKaptcha Captcha
    cvelistv5