CVE-2025-15106

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-15106

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15106.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-15106

Published

2025-12-27T10:32:05.218Z

Modified

2026-08-12T03:51:29.355396037Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

getmaxun Authentication Endpoint auth.ts router.get improper authorization

Details

A weakness has been identified in getmaxun maxun up to 0.0.28. The affected element is the function router.get of the file server/src/routes/auth.ts of the component Authentication Endpoint. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.0.1"
                },
                {
                    "last_affected": "0.0.1"
                },
                {
                    "introduced": "0.0.2"
                },
                {
                    "last_affected": "0.0.2"
                },
                {
                    "introduced": "0.0.3"
                },
                {
                    "last_affected": "0.0.3"
                },
                {
                    "introduced": "0.0.4"
                },
                {
                    "last_affected": "0.0.4"
                },
                {
                    "introduced": "0.0.5"
                },
                {
                    "last_affected": "0.0.5"
                },
                {
                    "introduced": "0.0.6"
                },
                {
                    "last_affected": "0.0.6"
                },
                {
                    "introduced": "0.0.7"
                },
                {
                    "last_affected": "0.0.7"
                },
                {
                    "introduced": "0.0.8"
                },
                {
                    "last_affected": "0.0.8"
                },
                {
                    "introduced": "0.0.9"
                },
                {
                    "last_affected": "0.0.9"
                },
                {
                    "introduced": "0.0.10"
                },
                {
                    "last_affected": "0.0.10"
                },
                {
                    "introduced": "0.0.11"
                },
                {
                    "last_affected": "0.0.11"
                },
                {
                    "introduced": "0.0.12"
                },
                {
                    "last_affected": "0.0.12"
                },
                {
                    "introduced": "0.0.13"
                },
                {
                    "last_affected": "0.0.13"
                },
                {
                    "introduced": "0.0.14"
                },
                {
                    "last_affected": "0.0.14"
                },
                {
                    "introduced": "0.0.15"
                },
                {
                    "last_affected": "0.0.15"
                },
                {
                    "introduced": "0.0.16"
                },
                {
                    "last_affected": "0.0.16"
                },
                {
                    "introduced": "0.0.17"
                },
                {
                    "last_affected": "0.0.17"
                },
                {
                    "introduced": "0.0.18"
                },
                {
                    "last_affected": "0.0.18"
                },
                {
                    "introduced": "0.0.19"
                },
                {
                    "last_affected": "0.0.19"
                },
                {
                    "introduced": "0.0.20"
                },
                {
                    "last_affected": "0.0.20"
                },
                {
                    "introduced": "0.0.21"
                },
                {
                    "last_affected": "0.0.21"
                },
                {
                    "introduced": "0.0.22"
                },
                {
                    "last_affected": "0.0.22"
                },
                {
                    "introduced": "0.0.23"
                },
                {
                    "last_affected": "0.0.23"
                },
                {
                    "introduced": "0.0.24"
                },
                {
                    "last_affected": "0.0.24"
                },
                {
                    "introduced": "0.0.25"
                },
                {
                    "last_affected": "0.0.25"
                },
                {
                    "introduced": "0.0.26"
                },
                {
                    "last_affected": "0.0.26"
                },
                {
                    "introduced": "0.0.27"
                },
                {
                    "last_affected": "0.0.27"
                },
                {
                    "introduced": "0.0.28"
                },
                {
                    "last_affected": "0.0.28"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15106.json"
}

References

Affected packages

Git / github.com/getmaxun/maxun

Affected ranges

Type

GIT

Repo

https://github.com/getmaxun/maxun

Events

Introduced

Last affected

7d0ab5f32d777a0f62f83dce4e7cf1ed961ab527

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.0.28"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:maxun:maxun:*:*:*:*:*:*:*:*"
}

Affected versions

v0.*

v0.0.01

v0.0.10

v0.0.12

v0.0.13

v0.0.14

v0.0.15

v0.0.16

v0.0.17

v0.0.18

v0.0.19

v0.0.21

v0.0.22

v0.0.23

v0.0.24

v0.0.25

v0.0.26

v0.0.27

v0.0.28

v0.0.6

v0.0.7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15106.json"