CVE-2025-52338

Published: Aug 19, 2025Modified: Jun 17, 2026Deferred

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass authentication and compromise user accounts via a bruteforce attack.

Related CWEs

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (4)

https://cwe.mitre.org/data/definitions/521.html

Source: cve@mitre.org

https://cwe.mitre.org/data/definitions/522.html

Source: cve@mitre.org

https://github.com/TrustStackSecurity/Advisories/tree/main/CVE-2025-52338

Source: cve@mitre.org

https://www.logicdata.com/products/webstore-for-erp-ecommerce-integration/

Source: cve@mitre.org

Timeline

No history available yet.