PT-2025-41234 · Unknown · Jhumanj Opnform

Balejin · Published 2025-10-08 · Updated 2025-10-08 · CVE-2025-11439

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JhumanJ OpnForm versions up to 1.9.3

Description A flaw exists in the processing of the /show/integrations file within JhumanJ OpnForm. Manipulation of this file can lead to missing authorization checks, potentially allowing for remote exploitation. The patch identified as 11d97d78f2de2cb49f79baed6bde8b611ec1f384 addresses this issue.

Recommendations Apply the patch 11d97d78f2de2cb49f79baed6bde8b611ec1f384 to resolve the issue.

Exploit

Fix

Incorrect Authorization

Missing Authorization

Weakness Enumeration

CWE-863

CWE-862

Related Identifiers

CVE-2025-11439

Affected Products

Jhumanj Opnform

References · 12

• 🔥 https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/edit?tab=t.0#heading=h.reuyi9lwvpj · Exploit
• https://github.com/JhumanJ/OpnForm/pull/900/commits/11d97d78f2de2cb49f79baed6bde8b611ec1f384 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-11439 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11439 · Vendor Advisory
• https://vuldb.com/?id.327376 · Note
• https://twitter.com/transilienceai/status/1975865844207874211 · Twitter Post
• https://vuldb.com/?submit.666880 · Note
• https://twitter.com/CVEnew/status/1975831141241528731 · Twitter Post
• https://vuldb.com/?ctiid.327376 · Note
• https://t.me/CVEtracker/34418 · Telegram Post
• https://t.me/cveNotify/137771 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1975859826123997201 · Twitter Post