PT-2025-46672 · Centralsquare · Centralsquare Community Development

Published 2025-11-12 · Updated 2025-12-31 · CVE-2025-64281

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7

Description An authentication bypass issue exists in CentralSquare Community Development 19.5.7, allowing unauthorized access to the admin panel without requiring administrative credentials. The issue allows attackers to bypass normal authentication checks and gain access to administrative functions. The vulnerable component is the admin panel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-64281

Affected Products

Centralsquare Community Development

References · 8

• https://osv.dev/vulnerability/CVE-2025-64281 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64281 · Security Note
• https://t.me/CVEtracker/37146 · Telegram Post
• https://centralsquare.com · Note
• https://twitter.com/VulmonFeeds/status/1988726208415117746 · Twitter Post
• https://t.me/cveNotify/147342 · Telegram Post
• https://twitter.com/CVEnew/status/1988820473204077057 · Twitter Post
• https://machevalia.blog/blog/multiple-vulnerabilities-in-centralsquare-etrakit-and-ivr · Note