CVE-2025-52101
BaseFortify
Publication date: 2025-07-01
Last updated on: 2025-07-03
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in linjiashop versions up to 0.9 involves Incorrect Access Control. Specifically, when using the default-generated JWT authentication, attackers can bypass the authentication mechanism and access the encrypted password and salt. With these, attackers can attempt to recover the actual password through brute-force cracking.
How can this vulnerability impact me? :
The vulnerability allows attackers to bypass authentication and potentially obtain user passwords by brute-force cracking the encrypted password and salt. This can lead to unauthorized access to user accounts and sensitive information, compromising the security of the affected system.