A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been made public and could be used.
References
| Link | Resource |
|---|---|
| https://github.com/newbee-ltd/newbee-mall/issues/101 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/newbee-ltd/newbee-mall/issues/101#issue-3380163659 | Exploit Issue Tracking Vendor Advisory |
| https://vuldb.com/?ctiid.323857 | Permissions Required VDB Entry |
| https://vuldb.com/?id.323857 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.647066 | Third Party Advisory VDB Entry |
Configurations
History
14 Oct 2025, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/newbee-ltd/newbee-mall/issues/101 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://github.com/newbee-ltd/newbee-mall/issues/101#issue-3380163659 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://vuldb.com/?ctiid.323857 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.323857 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.647066 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:newbee-mall_project:newbee-mall:1.0:*:*:*:*:*:*:* | |
| First Time |
Newbee-mall Project
Newbee-mall Project newbee-mall |
15 Sep 2025, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-15 04:15
Updated : 2025-10-14 19:37
NVD link : CVE-2025-10423
Mitre link : CVE-2025-10423
CVE.ORG link : CVE-2025-10423
JSON object : View
Products Affected
newbee-mall_project
- newbee-mall