VulnerabilityModified
CVE-2025-14889
Performing a manipulation of the argument ID results in improper authorization.
LOW 2.1EPSS 0.28%
Does this matter?
Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.
Description
A security flaw has been discovered in Campcodes Advanced Voting Management System 1.0. The impacted element is an unknown function of the file /admin/voters_edit.php of the component Password Handler. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
- CVSS 4.0
- 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.28% probability · 21th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-266, CWE-285
- Affected
- campcodes/advanced voting management system
- Source
- cna@vuldb.com
References
- https://gist.github.com/nikstudy576-maker/82e1e1ede9b848880aa09b87b92bc22cExploit, Third Party Advisory
- https://vuldb.com/?ctiid.337378Permissions Required, VDB Entry
- https://vuldb.com/?id.337378Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.715643Third Party Advisory, VDB Entry
- https://www.campcodes.com/Product
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.