VULNERABILITY INTELLIGENCE

CVE-2025-13565

CVSS score9.1 CRITICAL

EPSS probability0.51%

CISA KEVNot currently listed

Published2025-11-23

Last modified2026-10-08

Description

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.