Ibexa User Bundle is missing password change validation_CVE-2025-67719

8.5 / 10

HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Description

Ibexa is a composable end-to-end DXP (Digital Experience Platform). Versions 5.0.0-beta1 through 5.0.3 do not have password validation. During the transition from v4 to v5 an error was introduced into validation code which causes the validation of the previous password not to run as expected. This makes it possible for a logged in user to change their password in the back office without knowing the previous password. For example, if a user logs into their account and walks away without locking their workstation, an attacker could access the unattended session and change the password, therefore locking the legitimate user out. This issue is fixed in version 5.0.4.

AI Analysis

Missing password validation allows a logged-in user to change their password without knowing the previous password, potentially leading to account takeover.

Basic Information

ID CVE-2025-67719

Source GitHub_M

Published Dec 11, 2025 at 01:16

Affected Product

Vendor ibexa

Product user

Version >= 5.0.0-beta1, < 5.0.4

Affected Versions ibexa user >= 5.0.0-beta1, < 5.0.4

CWE Classification

CWE-620

AI Assessment

AI Score 8.5 / 10

AI Severity High

Vendor Ibexa

Product Ibexa User Bundle

Version 5.0.0-beta1, 5.0.1, 5.0.2, 5.0.3

References

{
    "lastseen": "",
    "description": "Ibexa is a composable end-to-end DXP (Digital Experience Platform). Versions 5.0.0-beta1 through 5.0.3 do not have password validation. During the transition from v4 to v5 an error was introduced into validation code which causes the validation of the previous password not to run as expected. This makes it possible for a logged in user to change their password in the back office without knowing the previous password. For example, if a user logs into their account and walks away without locking their workstation, an attacker could access the unattended session and change the password, therefore locking the legitimate user out. This issue is fixed in version 5.0.4.",
    "published": "2025-12-11T01:16:15.586Z",
    "modified": "2025-12-11T01:16:15.586Z",
    "type": "cve",
    "title": "Ibexa User Bundle is missing password change validation",
    "source": "GitHub_M",
    "references": "https://github.com/ibexa/user/security/advisories/GHSA-x93p-w2ch-fg67\nhttps://github.com/ibexa/user/commit/9d485bf385e6401c9f7ee80287d8ccd00f73dcf4\nhttps://developers.ibexa.co/security-advisories/ibexa-sa-2025-005-password-change-and-xss-vulnerabilities-in-back-office",
    "id": "CVE-2025-67719",
    "bulletinFamily": "",
    "cwe": [
        "CWE-620"
    ],
    "cvelist": null,
    "sourceData": "ibexa user >= 5.0.0-beta1, < 5.0.4",
    "sourceHref": "",
    "cvss": {
        "score": 8.5,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "user",
    "version": ">= 5.0.0-beta1, < 5.0.4",
    "vendor": "ibexa",
    "ai_description": "Missing password validation allows a logged-in user to change their password without knowing the previous password, potentially leading to account takeover.",
    "ai_severity": "High",
    "ai_vendor": "Ibexa",
    "ai_product": "Ibexa User Bundle",
    "ai_version": "5.0.0-beta1, 5.0.1, 5.0.2, 5.0.3",
    "ai_score": 8.5
}