BaseFortify

Publication date: 2025-11-12

Last updated on: 2026-04-29

Assigner: VulDB

Description

A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-12

Last Modified

2026-04-29

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13063

Affected Vendors & Products

Vendor	Product	Version / Range
dinukanavaratna	dee_store	1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a flaw in DinukaNavaratna Dee Store 1.0 affecting an unknown function. It allows an attacker to perform manipulations that lead to missing authorization, meaning unauthorized users may gain access or perform actions they should not be allowed to. The attack can be executed remotely and affects multiple endpoints. The exploit has been published and may be used by attackers.

Impact Analysis

The vulnerability can impact you by allowing unauthorized remote attackers to bypass authorization controls in DinukaNavaratna Dee Store 1.0. This could lead to unauthorized access to sensitive data or functionality, potentially resulting in data breaches, data manipulation, or other security incidents.

Hi! I’m here to help you understand CVE-2025-13063. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70