CVE-2025-45612: Critical severity xmall vulnerability
Published May 5, 2025
·Updated
Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.
Affected Software
2 affected components
xmall xmall
Exrick XMall<=1.1
Event History
May 5, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-45612?
CVE-2025-45612 is considered a high-severity vulnerability due to the potential for unauthorized access.
2
How do I fix CVE-2025-45612?
To fix CVE-2025-45612, update to the latest version of xmall that addresses the access control issue.
3
What types of attacks can exploit CVE-2025-45612?
CVE-2025-45612 can be exploited using crafted GET requests to bypass authentication mechanisms.
4
Which versions of xmall are affected by CVE-2025-45612?
xmall version 1.1 is affected by CVE-2025-45612, allowing for potential security breaches.
5
What is the impact of not addressing CVE-2025-45612?
Failing to address CVE-2025-45612 may result in unauthorized users gaining access to sensitive areas of the application.