{"id":"CVE-2025-12283","state":"PUBLISHED","title":"code-projects Client Details System authorization","description":"A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be exploited.","publishedAt":"2025-10-27T14:02:05.718Z","updatedAt":"2026-01-07T16:50:56.310Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["code-projects Client Details System"],"affected":[{"vendor":"code-projects","product":"Client Details System","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.329953","https://vuldb.com/?ctiid.329953","https://vuldb.com/?submit.674213","https://github.com/hellonewbie/tutorial/issues/11","https://code-projects.org/"],"weaknesses":["CWE-639","CWE-285"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/12xxx/CVE-2025-12283.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-12283","state":"PUBLISHED","datePublished":"2025-10-27T14:02:05.718Z","dateUpdated":"2026-01-07T16:50:56.310Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-10-26T16:17:06.481Z"},"containers":{"cna":{"title":"code-projects Client Details System authorization","descriptions":[{"lang":"en","value":"A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be exploited."},{"lang":"de","value":"Es wurde eine Schwachstelle in code-projects Client Details System 1.0 entdeckt. Dabei geht es um eine nicht genauer bekannte Funktion. Dank Manipulation mit unbekannten Daten kann eine authorization bypass-Schwachstelle ausgenutzt werden. Der Angriff lässt sich über das Netzwerk starten. Der Exploit ist öffentlich verfügbar und könnte genutzt werden."}],"affected":[{"vendor":"code-projects","product":"Client Details System","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.329953","name":"VDB-329953 | code-projects Client Details System authorization","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.329953","name":"VDB-329953 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.674213","name":"Submit #674213 | code-projects Client Details System V1.0 Insecure Direct Object Reference","tags":["third-party-advisory"]},{"url":"https://github.com/hellonewbie/tutorial/issues/11","tags":["exploit","issue-tracking"]},{"url":"https://code-projects.org/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4,"vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","type":"CWE","lang":"en","description":"Authorization Bypass"}]},{"descriptions":[{"cweId":"CWE-285","type":"CWE","lang":"en","description":"Improper Authorization"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-10-27T14:02:05.718Z"},"timeline":[{"time":"2025-10-26T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-10-26T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-10-26T17:23:13.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"LiuJiYing (VulDB User)","type":"reporter"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-07T16:50:22.361315Z","id":"CVE-2025-12283","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-07T16:50:56.310Z"}}]}}}