CVE-2025-12868

Publication date

2025-11-10 03:14:28

Family

twcert

State

PUBLISHED

Description

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website.