CVE-2025-13119CWE-352CWE-862broken-access-controlcsrf

CVE-2025-13119

Medium · published November 13, 2025

CVSS v3.1

4.3

EPSS

Percentile

16.1

In the wild

Unconfirmed

What it is

A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been published and may be used.

The record

Technical detail

CVSS v3.1: 4.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00255 · 16.1th percentile
Weaknesses: CWE-352 · Cross-Site Request Forgery (CSRF); CWE-862 · Missing Authorization
Published: 2025-11-13T20:15Z

Affected products (1)

Product	Versions	Fixed in
fabian/simple_e-banking_system	all versions	—

References (5)

https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-CSRF-Forced-Withdrawal · [email protected]https://vuldb.com/?ctiid.332324 · [email protected]https://vuldb.com/?id.332324 · [email protected]https://vuldb.com/?submit.683335 · [email protected]https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-CSRF-Forced-Withdrawal · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

13 NOV 15:02Z
Fabian Ros/SourceCodester Simple E-Banking System cross-site request forgery
cvelistv5