CVE-2025-11609

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-11609
A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is told to be difficult. The exploit has been published and may be used.

3.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

2.6 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://code-projects.org/ Product
https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md Exploit Third Party Advisory Mitigation
https://vuldb.com/?ctiid.327932 Permissions Required VDB Entry
https://vuldb.com/?id.327932 Third Party Advisory VDB Entry
https://vuldb.com/?submit.672589 Third Party Advisory VDB Entry
https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md Exploit Third Party Advisory Mitigation
Configurations

Configuration 1 (hide)

cpe:2.3:a:fabian:hospital_management_system:1.0:*:*:*:*:*:*:*
History

23 Oct 2025, 20:06

Type Values Removed Values Added
CPE cpe:2.3:a:fabianros:hospital_management_system:1.0:*:*:*:*:*:*:* cpe:2.3:a:fabian:hospital_management_system:1.0:*:*:*:*:*:*:*
First Time Fabian
Fabian hospital Management System

20 Oct 2025, 17:28

Type Values Removed Values Added
CPE cpe:2.3:a:fabianros:hospital_management_system:1.0:*:*:*:*:*:*:*
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md - () https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md - Exploit, Third Party Advisory, Mitigation
References () https://vuldb.com/?ctiid.327932 - () https://vuldb.com/?ctiid.327932 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.327932 - () https://vuldb.com/?id.327932 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.672589 - () https://vuldb.com/?submit.672589 - Third Party Advisory, VDB Entry
First Time Fabianros hospital Management System
Fabianros

14 Oct 2025, 15:16

Type Values Removed Values Added
References () https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md - () https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md -

11 Oct 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-11 18:15

Updated : 2025-10-23 20:06

NVD link : CVE-2025-11609

Mitre link : CVE-2025-11609

CVE.ORG link : CVE-2025-11609

JSON object : View

Products Affected

fabian

  • hospital_management_system
CWE
CWE-320

Key Management Errors

CWE-321

Use of Hard-coded Cryptographic Key