CVE-2025-47817

Summary

In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.

Affected Software

Weaknesses

• CWE-472: CWE-472 External Control of Assumed-Immutable Web Parameter

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/bluewave-labs/Checkmate/pull/2161
• https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-rq7r-p9cq-5q4f
• https://github.com/bluewave-labs/Checkmate/commit/b387ebaae96fc3a23b090a8baea7a9ebaa70f052

• ←Previous
• Next→