CVE-2025-69243
Awaiting Analysis Awaiting Analysis - Queue
User Enumeration Vulnerability in Raytha CMS Password Reset

Publication date: 2026-03-16

Last updated on: 2026-03-16

Assigner: CERT.PL

Description
Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack with valid logins. This issue was fixed in version 1.5.0.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-16
Last Modified
2026-03-16
Generated
2026-06-16
AI Q&A
2026-03-16
EPSS Evaluated
2026-06-15
NVD
CVE-2025-69243
EUVD
EUVD-2025-208713
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
raytha raytha to 1.5.0 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-204 The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

Raytha CMS has a vulnerability in its password reset functionality that allows user enumeration.

This means that an attacker can distinguish whether a login is valid or not based on differences in the messages returned during the password reset process.

By exploiting this, an attacker can perform a brute force attack using valid login names.

Impact Analysis

This vulnerability can allow attackers to identify valid usernames on the system.

With valid usernames, attackers can launch brute force attacks to compromise accounts.

This increases the risk of unauthorized access and potential data breaches.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate this vulnerability, you should upgrade Raytha CMS to version 1.5.0 or later, where the issue has been fixed.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-69243. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart