CVE-2025-5906

A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://code-projects.org/ Product
https://github.com/tuooo/CVE/issues/11 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.311679 Permissions Required VDB Entry
https://vuldb.com/?id.311679 Third Party Advisory VDB Entry
https://vuldb.com/?submit.592266 Third Party Advisory VDB Entry
https://github.com/tuooo/CVE/issues/11 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:code-projects:laundry_system:1.0:*:*:*:*:*:*:*

History

13 Jun 2025, 19:51

Type Values Removed Values Added
First Time Code-projects laundry System
Code-projects
CPE cpe:2.3:a:code-projects:laundry_system:1.0:*:*:*:*:*:*:*
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://github.com/tuooo/CVE/issues/11 - () https://github.com/tuooo/CVE/issues/11 - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.311679 - () https://vuldb.com/?ctiid.311679 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.311679 - () https://vuldb.com/?id.311679 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.592266 - () https://vuldb.com/?submit.592266 - Third Party Advisory, VDB Entry

10 Jun 2025, 16:15

Type Values Removed Values Added
Summary
  • (es) Se ha detectado una vulnerabilidad clasificada como crítica en code-projects Laundry System 1.0 Esta afecta a una parte desconocida del archivo /data/. La manipulación provoca la omisión de la autenticación. Es posible iniciar el ataque de forma remota. Se ha hecho público el exploit y puede que sea utilizado.
References () https://github.com/tuooo/CVE/issues/11 - () https://github.com/tuooo/CVE/issues/11 -

10 Jun 2025, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-10 01:15

Updated : 2025-06-13 19:51


NVD link : CVE-2025-5906

Mitre link : CVE-2025-5906

CVE.ORG link : CVE-2025-5906


JSON object : View

Products Affected

code-projects

  • laundry_system
CWE
CWE-287

Improper Authentication

CWE-306

Missing Authentication for Critical Function