CVE 6.3 MEDIUM

TaleLin Lin-CMS Tests Folder config.py password in configuration file_CVE-2025-15151

6.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py of the component Tests Folder. This manipulation of the argument username/password causes password in configuration file. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been publicly disclosed and may be utilized.

Basic Information

ID CVE-2025-15151
Source VulDB
Published Dec 28, 2025 at 19:32

Affected Product

Vendor TaleLin
Product Lin-CMS
Version 0.1
Affected Versions TaleLin Lin-CMS 0.1
TaleLin Lin-CMS 0.2
TaleLin Lin-CMS 0.3
TaleLin Lin-CMS 0.4
TaleLin Lin-CMS 0.5
TaleLin Lin-CMS 0.6.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.