Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-10352

Missing Authorization vulnerability in Melis Platform

Description

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Melis Technology Melis Platform

Default version status: unaffected

  • 0 to < 5.3.11affected

References