PT-2025-29275 · Unknown · Saltbo Zpan

Jiashenghe · Published 2025-07-11 · Updated 2025-08-18 · CVE-2025-7453

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: saltbo zpan versions up to 1.6.5 saltbo zpan version 1.7.0-beta2

Description: A vulnerability exists in saltbo zpan related to the JSON Web Token Handler component. The issue affects the NewToken function within the zpan/internal/app/service/token.go file. Manipulation of the input 123 results in the use of a hard-coded password. The attack can be initiated remotely, but exploitation is considered difficult. The exploit has been publicly disclosed.

Recommendations: Versions up to 1.6.5: At the moment, there is no information about a newer version that contains a fix for this vulnerability. saltbo zpan version 1.7.0-beta2: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-255

CWE-259

Related Identifiers

CVE-2025-7453

Affected Products

Saltbo Zpan

References · 9

• 🔥 https://github.com/saltbo/zpan/issues/219 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7453 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7453 · Vendor Advisory
• https://reddit.com/r/CyberDudeBivash/comments/1mtntya/daily_cve_roundup_august_18_2025_by · Reddit Post
• https://twitter.com/CVEnew/status/1943744949775708238 · Twitter Post
• https://vuldb.com/?ctiid.316097 · Note
• https://vuldb.com/?id.316097 · Note
• https://t.me/cvetracker/27595 · Telegram Post
• https://vuldb.com/?submit.608447 · Note