CVE-2025-47245

Summary

In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.

Affected Software

Weaknesses

• CWE-472: CWE-472 External Control of Assumed-Immutable Web Parameter

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/bluewave-labs/Checkmate/pull/2160
• https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-7x3q-g6gq-f4mm
• https://github.com/bluewave-labs/Checkmate/commit/d4a60723f490502b3fe6f7f780a85d29bf5d1385

• ←Previous
• Next→