← back
CVE-2025-31122criticalCWE-287CWE-290

scratch-coding-hut.github.io Login Links Generation vulnerability

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9epss 0.4%
exploitation probability
0.4%top 70% of all CVEs
observed exploitation
nono source reports it
scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to login to any account by changing the username in the username field.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H