CVE-2025-12615: PHPGurukul News Portal settings.py hard-coded key
A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /onps/settings.py. Such manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12615?
CVE-2025-12615 is considered a high severity vulnerability due to its exploitation potential via remote manipulation of the SECRET_KEY.
How do I fix CVE-2025-12615?
To fix CVE-2025-12615, update the PHPGurukul News Portal to the latest version where this vulnerability has been addressed.
What kind of attack does CVE-2025-12615 enable?
CVE-2025-12615 enables an attacker to exploit a hard-coded cryptographic key through manipulation of the SECRET_KEY.
Is there a public exploit for CVE-2025-12615?
Currently, there is no known public exploit for CVE-2025-12615, but the vulnerability should be treated seriously.
What is affected by CVE-2025-12615?
CVE-2025-12615 affects the PHPGurukul News Portal 1.0, specifically the handling of the SECRET_KEY in the settings.py file.