CVE-2025-32816

Summary

CodeLit CourseLit before 0.57.5 allows Parameter Tampering via a payment plan associated with the wrong entity.

Affected Software

Weaknesses

• CWE-472: CWE-472 External Control of Assumed-Immutable Web Parameter

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/codelitdev/courselit/pull/574/commits/5e11094df938e08485d0ab8aec2722c237ba0496
• https://github.com/codelitdev/courselit/releases/tag/v0.57.5

• ←Previous
• Next→