CVE-2025-62527highCWE-15

CVE-2025-62527: high-severity vulnerability in remram44 taguette

Taguette vulnerable to password reset link poisoning

Published

Follow this CVE+ Monitor taguette+ Monitor taguette

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.3%
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been patched in version 1.5.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Affected products
remram44 · taguette
Related CVEs — remram44 taguette

In the same product, most dangerous first.

CVE-2025-67502MEDIUMTaguette does not safeguard against Open RedirectEPSS 0.3%CVE-2025-62528MEDIUMTaguette cross-site scripting vulnerability via tag name, tag description, document name and document descriptionEPSS 0.2%