CVE-2025-10352-POC

CVE-2025-10352 POC - 管理者アカウント作成 🛠️ CVE-2025-10352 の POC: Melis Platform melis-core の認証されていないエンドポイントで、特定の管理エンドポイントへの巧妙に細工された HTTP リクエストを介して管理者アカウントの作成が可能になります。 🔗 参考情報 📄 MITRE 上の CVE-2025-10352 📄 INCIBE スペイン国家サイバーセキュリティ研究所 の Melis Platform 警告 📄 PoC: CVE-2025-10352-POC.txt Burp からエクスポートされた生の HTTP...

Unauthorized Account Creation

melis-core is vulnerable to Unauthorized Account Creation. The vulnerability is due to missing authentication on the /melis/MelisCore/ToolUser/addNewUser endpoint, where an unauthenticated attacker can directly invoke this function to create a new administrator account and gain full control of th...

GHSA-P3VC-G9F9-MGW4 Melis Platform CMS Unauthenticated Admin Account Creation

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

Melis Platform CMS Unauthenticated Admin Account Creation

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

Exploit for CVE-2025-10353

CVE-2025-10352 - Admin Account Creation PoC 🛠️ Exploit for C...

Missing Authorization

Overview melisplatform/melis-core is a Melis Platform Core module Affected versions of this package are vulnerable to Missing Authorization via the /melis/MelisCore/ToolUser/addNewUser endpoint. An attacker can gain unauthorized administrative access by sending a crafted request to this endpoint...

CVE-2025-10352

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'...

PT-2025-41245

Name of the Vulnerable Software and Affected Versions Melis Platform affected versions not specified Description A flaw exists in the melis-core module that allows an unauthenticated attacker to create an administrator account. This is achieved by sending a request to the...

Melis Platform 安全漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A security vulnerability exists in Melis Platform, which originates in the melis-core module and allows an unauthenticated attacker to create an administrator account by requesting...