Beveiligingsadvies

CVE-2025-63523

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-01 00:00:00
Laatst bijgewerkt 2025-12-01 20:13:19
Toegewezen door mitre
CVSS-score 6.5
Status PUBLISHED

Beschrijving

FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes.