CVE Explorer

CVE-2025-62406

Piwigo is a full featured open source photo gallery application for the web. In Piwigo 15.6.0, using the password reset function allows sending a password-reset URL by entering an existing username or email address. However, the hostname used to construct this URL is taken from the HTTP request's Host header and is not validated at all. Therefore, an attacker can send a password-reset URL with a modified hostname to an existing user whose username or email the attacker knows or guesses. This iss

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f233bc71fbf7e6d2e3c6e0e3c664dd6afa222e2758aa2176e2a22e306ca058e1

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"Piwigo","vendor":"Piwigo","versions":[{"status":"affected","version":"= 15.6.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:3543c26e127f6f2bfac8d09ddc766c22650732bf5dff34cf97dbedb693865ac1 · sha256:e6339e81c6ac1505… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:3543c26e127f6f2bfac8d09ddc766c22650732bf5dff34cf97dbedb693865ac1 · sha256:e6339e81c6ac1505… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-640","description":"CWE-640: Weak Password Recovery Mechanism for Forgotten Password","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:3543c26e127f6f2bfac8d09ddc766c22650732bf5dff34cf97dbedb693865ac1 · sha256:e6339e81c6ac1505… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions

{"name":"https://github.com/Piwigo/Piwigo/commit/9d2565465efc3570963ff431b45cad21610f6692","tags":["x_refsource_MISC"],"url":"https://github.com/Piwigo/Piwigo/commit/9d2565465efc3570963ff431b45cad21610f6692"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:3543c26e127f6f2bfac8d09ddc766c22650732bf5dff34cf97dbedb693865ac1 · sha256:e6339e81c6ac1505… · /containers/cna/references/1

{"name":"https://github.com/Piwigo/Piwigo/security/advisories/GHSA-9986-w7jf-33f6","tags":["x_refsource_CONFIRM"],"url":"https://github.com/Piwigo/Piwigo/security/advisories/GHSA-9986-w7jf-33f6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:3543c26e127f6f2bfac8d09ddc766c22650732bf5dff34cf97dbedb693865ac1 · sha256:e6339e81c6ac1505… · /containers/cna/references/0

{"tags":["exploit"],"url":"https://github.com/Piwigo/Piwigo/security/advisories/GHSA-9986-w7jf-33f6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:3543c26e127f6f2bfac8d09ddc766c22650732bf5dff34cf97dbedb693865ac1 · sha256:e6339e81c6ac1505… · /containers/adp/0/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer