ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2025-62717
9.1критическая

CVE-2025-62717

Описание

Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit 1f726df.

Затрагиваемое ПО
Emlog Emlog
CVSS
Балл9.1 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Источники
https://github.com/emlog/emlog/commit/1f726df0ce56a1bc6e8225dd95389974173bd0c0https://github.com/emlog/emlog/security/advisories/GHSA-wwj4-ppfj-hcm6