CVE-2025-62145
Missing Authorization in NewClarity DMCA Badge Enables Unauthorized Access
Publication date: 2025-12-31
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| newclarity | dmca_protection_badge | 2.2.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Missing Authorization issue in the NewClarity DMCA Protection Badge, which allows attackers to exploit incorrectly configured access control security levels. Essentially, the software does not properly verify whether a user has permission to perform certain actions, potentially allowing unauthorized access or actions.
How can this vulnerability impact me? :
The impact of this vulnerability is limited integrity loss, meaning an attacker could modify or manipulate data or settings without proper authorization. There is no impact on confidentiality or availability according to the CVSS score, but unauthorized changes could still affect the reliability or trustworthiness of the system.