CVE-2025-12615 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipu…
Low CVSS: 2.3

CVE-2025-12615

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRET_KEY leads to use of hard-coded cryptographic key
. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been disclosed publicly and may be used.
Vendor
Phpgurukul
Product
News Portal
CWE
CWE-320
Yayın Tarihi
2025-11-03 04:15:32
Güncelleme
2025-11-10 16:18:36
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-320 News Portal LOW Phpgurukul 2025

Referanslar

https://github.com/NishantKumar-CSE/News-Portal-Python-Django-Project/blob/main/Hard-coded%20Cryptographic%20Key.md https://phpgurukul.com/ https://vuldb.com/?ctiid.330909 https://vuldb.com/?id.330909 https://vuldb.com/?submit.678625 https://github.com/NishantKumar-CSE/News-Portal-Python-Django-Project/blob/main/Hard-coded%20Cryptographic%20Key.md