CVE-2025-12616CWE-200CWE-215information-disclosure

CVE-2025-12616

Low · published November 3, 2025

CVSS v3.1
3.7
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onps/settings.py. Performing a manipulation results in insertion of sensitive information into debugging code. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is regarded as difficult. The exploit is now public and may be used.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00588 · 47.4th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-215 · Insertion of Sensitive Information Into Debugging Code
Published
2025-11-03T09:15Z
Affected products (1)
ProductVersionsFixed in
phpgurukul/news_portalall versions—
References (6)
https://github.com/NishantKumar-CSE/News-Portal-Python-Django-Project/blob/main/Information%20Disclosure%20via%20Debug%20Mode.md · [email protected]https://phpgurukul.com/ · [email protected]https://vuldb.com/?ctiid.330910 · [email protected]https://vuldb.com/?id.330910 · [email protected]https://vuldb.com/?submit.678649 · [email protected]https://github.com/NishantKumar-CSE/News-Portal-Python-Django-Project/blob/main/Information%20Disclosure%20via%20Debug%20Mode.md · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 03 NOV 04:02Z
    PHPGurukul News Portal settings.py insertion of sensitive information into debugging code
    cvelistv5