CVE-2025-43712

🗓️ 25 Jul 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 90 Views🌐 WEB

JHipster before v8.9.0 allows privilege escalation via modified authorities parameter in login response

Reporter	Title	Published	Views	Family All 10
CNNVD	JHipster 安全漏洞	25 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-43712	25 Jul 202500:00	–	cvelist
EUVD	EUVD-2025-22595	3 Oct 202520:07	–	euvd
Github Security Blog	Withdrawn Advisory: JHipster allows privilege escalation via a modified authorities parameter	25 Jul 202515:30	–	github
NVD	CVE-2025-43712	25 Jul 202513:15	–	nvd
Positive Technologies	PT-2025-30814 · Jhipster · Jhipster	25 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-43712	27 Jul 202500:20	–	redhatcve
Snyk	Incorrect Authorization	25 Jul 202513:41	–	snyk
vulnersOsv	@iurra/chickpea-stew (>=0.3.0, <=0.3.7), @joaopaulomfe/generator-jhipster-agile-kip (>=0.1.0, <=0.1.1) +175 more potentially affected by CVE-2025-43712 via generator-jhipster (>=2.25.0, <=9.2.0)	25 Jul 202513:41	–	vulnersosv
Vulnrichment	CVE-2025-43712	25 Jul 202500:00	–	vulnrichment

[
  {
    "defaultStatus": "unknown",
    "product": "JHipster",
    "vendor": "JHipster",
    "versions": [
      {
        "lessThan": "8.9.0",
        "status": "unknown",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/jhipster/generator-jhipster/releases
firecompass	www.firecompass.com/cve-2025-43712-jhipster-platform-privilege-escalation-vulnerability-discovered-by-firecompass-research-added-to-nist/
groups	www.groups.google.com/g/jhipster-dev/c/ATSlWkEjw2w
medium	www.medium.com/@hritikgodara/cve-2025-43712-privilege-escalation-via-response-manipulation-in-the-jhipster-platform-5e18c0434def

Parameter	Position	Path	Description	CWE
authorities	nested	api/account	Privilege escalation by modifying the authorities value in the API response, enabling access to admin functionalities.	CWE-451, CWE-284

17 Jun 2026 09:24Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.18

EPSS0.0025

SSVC