CVE-2025-47227
HIGH 7.5EPSS 1.9%
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GET and a POST request to login.php.is sufficient. An unauthenticated attacker can then bypass authentication via administrator account takeover.
- Affected
- ScriptCase
- CVSS v3.1 MITRE
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - EPSS
- 1.92% chance of exploitation in the next 30 days, 80th percentile
- Published
- 2025-07-05
- Updated
- 2025-07-07
Proof-of-concept exploits (2)
- Outs1d3r-Net/CVE-2025-472276★ · 2026-05-29
- synacktiv/CVE-2025-47227_CVE-2025-4722811★ · 2025-05-14