Unauthorized State Modification

🗓️ 19 May 2025 08:12:50Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 10 Views

Vulnerability in Reflex allows unauthorized modification of private state fields by attackers.

Reporter	Title	Published	Views	Family All 7
Chainguard	CVE-2025-47425 vulnerabilities	20 May 202501:15	–	cgr
CVE	CVE-2025-47425	15 May 202516:15	–	cve
Github Security Blog	Reflex vulnerable to private state fields modification	15 May 202516:15	–	github
OSV	CGA-5WQ8-VC6G-466F	29 Jan 202600:46	–	osv
OSV	CGA-QV5H-GF5F-8XQX	20 May 202500:45	–	osv
Snyk	Access Control Bypass	15 May 202516:15	–	snyk
Wolfi	CVE-2025-47425 vulnerabilities	20 May 202501:45	–	wolfi

Vulners

Node

OR

reflex reflexRange0.2.7a1–0.4.9a2python

reflex reflexRange0.4.9–0.5.10a3python

reflex reflexRange0.5.10–0.6.8a2python

reflex reflexRange0.6.8–0.7.1a5python

reflex reflexRange0.7.1–0.7.2.dev1python

reflex reflexRange0.7.2–0.7.3a2python

reflex reflexRange0.7.3–0.7.4a3python

reflex reflexRange0.7.4–0.7.5a1python

reflex reflexRange0.7.5–0.7.6a1python

reflex reflexRange0.7.6–0.7.7a2python

reflex reflexRange0.7.7–0.7.8a1python

reflex reflexRange0.7.8–0.7.9a2python

reflex reflexRange0.7.9–0.7.10a1python

reflex reflexRange0.7.10–0.7.11a1python

Source	Link
github	www.github.com/reflex-dev/reflex/commit/cf8f5dbcbdd996f3478a7be660993f9c760ede36
github	www.github.com/advisories/GHSA-rf8x-9mhr-49wg

19 May 2025 14:56Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.00439

unauthorized state modification improper access control event handler vulnerability attacker exploitation.