{"id":"CVE-2025-13063","state":"PUBLISHED","title":"DinukaNavaratna Dee Store authorization","description":"A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected.","publishedAt":"2025-11-12T21:02:07.581Z","updatedAt":"2025-11-13T14:18:20.215Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["DinukaNavaratna Dee Store"],"affected":[{"vendor":"DinukaNavaratna","product":"Dee Store","versions":[{"version":"1.0","status":"affected"}]}],"references":["https://vuldb.com/?id.332189","https://vuldb.com/?ctiid.332189","https://vuldb.com/?submit.682708","https://github.com/DinukaNavaratna/Dee_Store-Simple_Online_Shopping_Website/issues/1"],"weaknesses":["CWE-862","CWE-863"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/13xxx/CVE-2025-13063.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-13063","state":"PUBLISHED","datePublished":"2025-11-12T21:02:07.581Z","dateUpdated":"2025-11-13T14:18:20.215Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-11-12T12:50:11.890Z"},"containers":{"cna":{"title":"DinukaNavaratna Dee Store authorization","descriptions":[{"lang":"en","value":"A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead to missing authorization. The attack may be performed from remote. The exploit has been published and may be used. Multiple endpoints are affected."},{"lang":"de","value":"Es wurde eine Schwachstelle in DinukaNavaratna Dee Store 1.0 entdeckt. Betroffen davon ist eine unbekannte Funktion. Die Manipulation führt zu missing authorization. Umgesetzt werden kann der Angriff über das Netzwerk. Die Ausnutzung wurde veröffentlicht und kann verwendet werden."}],"affected":[{"vendor":"DinukaNavaratna","product":"Dee Store","versions":[{"version":"1.0","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.332189","name":"VDB-332189 | DinukaNavaratna Dee Store authorization","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.332189","name":"VDB-332189 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.682708","name":"Submit #682708 | DinukaNavaratna Dee_Store-Simple_Online_Shopping_Website 1.0 Missing Authorization","tags":["third-party-advisory"]},{"url":"https://github.com/DinukaNavaratna/Dee_Store-Simple_Online_Shopping_Website/issues/1","tags":["exploit","issue-tracking"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-862","type":"CWE","lang":"en","description":"Missing Authorization"}]},{"descriptions":[{"cweId":"CWE-863","type":"CWE","lang":"en","description":"Incorrect Authorization"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-11-12T21:02:07.581Z"},"timeline":[{"time":"2025-11-12T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-11-12T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-11-12T13:55:30.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"ixpqxi (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-11-13T14:18:14.811236Z","id":"CVE-2025-13063","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-11-13T14:18:20.215Z"}}]}}}