PT-2025-9142 · Unknown · Coding Hut

Fluffy728 · Published 2025-03-01 · Updated 2025-03-02 · CVE-2025-27416

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U

Name of the Vulnerable Software and Affected Versions Coding Hut website (affected versions not specified)

Description The issue concerns the sign-in functionality of the Coding Hut website, where any user could potentially sign into another user's account. As of the time of publication, there is no available fix, but work on a fix is underway.

Recommendations As a temporary workaround, consider avoiding the use of the sign-in page until a fix is available.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-27416

GHSA-XX32-R9WR-WHFF

Affected Products

Coding Hut

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27416.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-27416 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27416 · Security Note
• https://github.com/Scratch-Coding-Hut/Scratch-Coding-Hut.github.io/security/advisories/GHSA-xx32-r9wr-whff · Note
• https://github.com/Scratch-Coding-Hut/Scratch-Coding-Hut.github.io/issues/3 · Note
• https://t.me/cvedetector/19198 · Telegram Post
• https://twitter.com/cybercronai/status/1896199252168061105 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1895649188542644600 · Twitter Post
• https://twitter.com/CVETracker/status/1895927205252788669 · Twitter Post