CVE-2025-13063CWE-862CWE-863broken-access-control

CVE-2025-13063

High · published November 13, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

⚠️ An unknown function in DinukaNavaratna Dee Store 1.0 has left the door ajar for attackers — and they could just waltz right in! Think of this flaw like a restaurant that forgot to lock its back door. A clever diner could sneak in and access areas restricted to staff, leading to all sorts of mischief. 🍽️ An attacker exploiting this vulnerability could bypass authorization checks, gaining access to sensitive functions across multiple endpoints. This could lead to unauthorized data manipulation, leaving your system exposed and vulnerable to further attacks!

Put simply

Think of this flaw like a restaurant that forgot to lock its back door. A clever diner could sneak in and access areas restricted to staff, leading to all sorts of mischief. 🍽️ This vulnerability stems from missing authorization checks in an unknown function, allowing remote manipulation of affected endpoints without proper verification of user permissions.

What to do

An attacker exploiting this vulnerability could bypass authorization checks, gaining access to sensitive functions across multiple endpoints. This could lead to unauthorized data manipulation, leaving your system exposed and vulnerable to further attacks! To protect yourself, update to the patched version of DinukaNavaratna Dee Store as soon as possible. Implement strict access controls and regularly audit your endpoints to ensure no unauthorized access is granted. 🛡️ You've got this! With a few simple steps, you can lock it down and keep your system secure. 💪✨

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Weaknesses
CWE-862 · Missing Authorization; CWE-863 · Incorrect Authorization
Published
2025-11-13T02:15Z
References (4)
EPSS history
Timeline
  • 12 NOV 21:02Z
    DinukaNavaratna Dee Store authorization
    cvelistv5