CVE-2025-31122CWE-287CWE-290

scratch-coding-hut.github.io Login Links Generation vulnerability

Critical · published March 31, 2025

CVSS v4.0
9.0
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to login to any account by changing the username in the username field.

The record
Technical detail
CVSS v4.0
9.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00370 · 29.8th percentile
Weaknesses
CWE-287 · Improper Authentication; CWE-290 · Authentication Bypass by Spoofing
Published
2025-03-31T16:58Z
EPSS history
Timeline
  • 31 MAR 16:58Z
    scratch-coding-hut.github.io Login Links Generation vulnerability
    cvelistv5