CVE-2025-63523: Medium severity FeehiCMS FeehiCMS vulnerability
FeehiCMS version 2.1.1 fails to enforce server-side immutability for parameters that are presented to clients as "read-only." An authenticated attacker can intercept and modify the parameter in transit and the backend accepts the changes. This can lead to unintended username changes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63523?
CVE-2025-63523 has a medium severity rating due to its potential for authenticated attackers to manipulate user parameters.
How do I fix CVE-2025-63523?
To fix CVE-2025-63523, ensure server-side validation is enforced for all parameters, preventing unauthorized modifications.
What is affected by CVE-2025-63523?
CVE-2025-63523 specifically affects FeehiCMS version 2.1.1.
Who can exploit CVE-2025-63523?
Authenticated attackers can exploit CVE-2025-63523 by intercepting and modifying parameters during transit.
What are the consequences of CVE-2025-63523?
The consequences of CVE-2025-63523 include potential unauthorized username changes, leading to possible account takeovers.