Critical · 9.8 CVE-2025-51543 EUVD-2025-25212GHSA-prwv-6q8w-vfgq

An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/reset_…

Published Aug 19, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/reset_password endpoint.

References

https://github.com/JustDinooo/CVEs/blob/main/CVE-2025-51543/poc.md