CVE-2025-13252
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-16

Last updated on: 2026-04-29

Assigner: VulDB

Description
A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-16
Last Modified
2026-04-29
Generated
2026-06-16
AI Q&A
2025-11-17
EPSS Evaluated
2026-06-15
NVD
CVE-2025-13252
EUVD
EUVD-2025-197734
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
shsuishang modulithshop *
shsuishang modulithshop 1.0.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-259 The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the shsuishang ShopSuite ModulithShop product, specifically in an unknown functionality of the RSA/OAuth2/Database component. It involves hard-coded credentials that can be exploited remotely. The presence of hard-coded credentials means attackers can potentially gain unauthorized access without needing to bypass authentication mechanisms. The exploit has been made public, increasing the risk of attacks.

Impact Analysis

The vulnerability can allow remote attackers to exploit hard-coded credentials, potentially leading to unauthorized access to the system. This can result in data breaches, unauthorized actions, and compromise of system integrity and confidentiality.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-13252. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart