PT-2025-18959 · Unknown · Bluewave Checkmate

Published 2025-05-03 · Updated 2025-05-09 · CVE-2025-47245

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlueWave Checkmate versions through 2.0.2 before d4a6072

Description The issue allows an invite request to be modified to specify a privileged role.

Recommendations For BlueWave Checkmate versions through 2.0.2 before d4a6072, consider restricting invite request modifications to prevent specifying privileged roles until a patch is available.

Fix

Weakness Enumeration

CWE-472

Related Identifiers

BDU:2026-00077

CVE-2025-47245

GHSA-7X3Q-G6GQ-F4MM

Affected Products

Bluewave Checkmate

References · 15

• https://osv.dev/vulnerability/CVE-2025-47245 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47245 · Security Note
• https://bdu.fstec.ru/vul/2026-00077 · Security Note
• https://github.com/bluewave-labs/Checkmate/pull/2160 · Note
• https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-7x3q-g6gq-f4mm · Note
• https://github.com/bluewave-labs/Checkmate/commit/d4a60723f490502b3fe6f7f780a85d29bf5d1385 · Note
• https://t.me/cvedetector/24414 · Telegram Post
• https://cvefeed.io/vuln/detail/CVE-2025-47245 · Note
• https://t.me/cvetracker/23004 · Telegram Post
• https://twitter.com/CVEnew/status/1918810287286657472 · Twitter Post
• https://twitter.com/cracbot/status/1920433586735292679 · Twitter Post
• https://twitter.com/transilienceai/status/1918870853703377296 · Twitter Post
• https://twitter.com/cracbot/status/1920795961858588989 · Twitter Post
• https://t.me/cvenotify/120743 · Telegram Post
• https://twitter.com/cybercronai/status/1919403097983521046 · Twitter Post