CVE-2025-62527

Published: Oct 20, 2025Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Exploitability: 2.8 / Impact: 4.2

Source: security-advisories@github.com (Secondary)

Description

Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been patched in version 1.5.0.

Affected (1)

Products: Taguette: Taguette

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Taguette Taguette	Up to 1.5.0

Related CWEs

External Control of System or Configuration Setting

One or more system settings or configuration elements can be externally controlled by a user.

References (2)

https://github.com/remram44/taguette/security/advisories/GHSA-7rc8-5c8q-jr6j

Source: security-advisories@github.com

Issue TrackingVendor Advisory

https://gitlab.com/remram44/taguette/-/issues/331

Source: security-advisories@github.com

Issue TrackingVendor Advisory

Timeline

No history available yet.