CVE-2025-15151

Description

A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py of the component Tests Folder. This manipulation of the argument username/password causes password in configuration file. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been publicly disclosed and may be utilized.

CVSS v3.1 Score

3.7

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

CWE-255 CWE-255

CWE-260 CWE-260

References

Other References

https://github.com/m3ngx1ng/cve/blob/4690d4020a4a642af4c50912f762937292228641/lin-cms.md https://vuldb.com/?ctiid.338528 https://vuldb.com/?id.338528 https://vuldb.com/?submit.721893

Frequently Asked Questions

What is CVE-2025-15151? +

A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py of the component Tests Folder. This manipulation of the argument username/password causes password in configuration file. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been publicly disclosed and may be utilized. It has a CVSS v3.1 base score of 3.7 (LOW).

How severe is CVE-2025-15151? +

CVE-2025-15151 has a CVSS v3.1 score of 3.7 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

How do I check if I'm vulnerable to CVE-2025-15151? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2021-37000 7.7

Some Huawei wearables have a permission management vulnerability.

CVE-2025-11284 7.3

A vulnerability has been found in Zytec Dalian Zhuoyun Technology Central Authentication Service 3. Affected by this vulnerability is an …

CVE-2025-11649 7.0

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. The affected element is an unknown function of the …

CVE-2025-11666 6.7

A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file …

CVE-2025-13187 5.3

A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such …

CVE-2025-13221 5.3

A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. …