CVE-2025-12283CWE-285CWE-639

CVE-2025-12283

Medium · published October 27, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00463 · 39.2th percentile
Weaknesses
CWE-285 · Improper Authorization; CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-10-27T18:15Z
Affected products (1)
ProductVersionsFixed in
fabian/client_details_systemall versions—
References (5)
https://code-projects.org/ · [email protected]https://github.com/hellonewbie/tutorial/issues/11 · [email protected]https://vuldb.com/?ctiid.329953 · [email protected]https://vuldb.com/?id.329953 · [email protected]https://vuldb.com/?submit.674213 · [email protected]
EPSS history
Timeline
  • 27 OCT 14:02Z
    code-projects Client Details System authorization
    cvelistv5