CVE-2025-63523
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes.
Vendor
Product
CWE
Yayın Tarihi
2025-12-01 15:15:50
Güncelleme
2025-12-02 03:06:26
Source Identifier
cve@mitre.org
KEV Date Added
-