← back
CVE-2025-55301mediumCWE-20

The Scratch Channel Allows Username Modification

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.7epss 0.2%
exploitation probability
0.2%top 93% of all CVEs
observed exploitation
nono source reports it
The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local storage to edit the account's username locally. This issue has been patched in version 1.1.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H