CVE-2025-12283

code-projects Client Details System authorization

A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Affected

code-projects · Client Details System

CVSS v4.0 VULDB

2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CVSS v3.1 VULDB

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0 VULDB

4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

0.46% chance of exploitation in the next 30 days, 39th percentile

Published

2025-10-27

Updated

2026-01-07

Proof-of-concept exploits (1)

• hellonewbie/tutorial/issues/11

Security advisories

• https://vuldb.com/?id.329953
• https://vuldb.com/?submit.674213
• https://code-projects.org

References

• CVE Record
• NVD entry

Related

• CVE-2025-11605
• CVE-2025-12243
• CVE-2025-12279
• CVE-2025-12280
• CVE-2025-12281
• CVE-2025-12282