Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-7897

harry0703 MoneyPrinterTurbo API Endpoint base.py verify_token missing authentication

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this issue is the function verify_token of the file app/controllers/base.py of the component API Endpoint. The manipulation leads to missing authentication. The attack may be launched remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

harry0703 MoneyPrinterTurbo

  • 1.2.0affected
  • 1.2.1affected
  • 1.2.2affected
  • 1.2.3affected
  • 1.2.4affected
  • 1.2.5affected
  • 1.2.6affected

References