CVE-2025-12283HIGH 8.1EPSS p32.4%

CVE-2025-12283CVE-2025-12283

Description

A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Scoring

CVSS 3.18.1 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS0.41% probability of exploitation · percentile 32.4% · 2026-06-19T12:03:05Z
Published2025-10-27
Last modified2026-04-29

Underlying weaknesses· 2

CWE-285CWE-639

References

  1. https://code-projects.org/
  2. https://github.com/hellonewbie/tutorial/issues/11
  3. https://vuldb.com/?ctiid.329953
  4. https://vuldb.com/?id.329953
  5. https://vuldb.com/?submit.674213

2

TypeTargetConfidenceTier
WeaknessImproper Authorizationcwe-2850%live
WeaknessAuthorization Bypass Through User-Controlled Keycwe-6390%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-12243
CVE
CVE-2025-11605
CVE
CVE-2025-6446
CVE
CVE-2025-13576
CVE
CVE-2025-11585
CVE
CVE-2025-13580
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.