CVE-2025-12868: CyberTutor｜New Site Server - Use of Client-Side Authentication
New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12868?
CVE-2025-12868 is classified as a high severity vulnerability due to its potential to allow unauthenticated remote attackers to gain administrator privileges.
How do I fix CVE-2025-12868?
To fix CVE-2025-12868, ensure that client-side authentication mechanisms are properly implemented and validated to prevent unauthorized code modification.
Who is affected by CVE-2025-12868?
CVE-2025-12868 affects users of the CyberTutor New Site Server, which can be exploited if the system's client-side authentication is not secured.
What types of attacks can exploit CVE-2025-12868?
CVE-2025-12868 can be exploited through modifications to the frontend code, allowing attackers to elevate their privileges on the website.
When was CVE-2025-12868 disclosed?
CVE-2025-12868 was disclosed in 2025, highlighting a significant security issue in the CyberTutor New Site Server.