CVE-2025-69246

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-69246

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69246.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-69246

Published

2026-03-16T11:54:50.995Z

Modified

2026-07-15T01:49:08.503887198Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

Lack of bruteforce protection in Raytha CMS

Details

Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests without triggering lockout, throttling, or step-up challenges.

This issue was fixed in version 1.4.6.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69246.json",
    "cwe_ids": [
        "CWE-307"
    ],
    "cna_assigner": "CERT-PL"
}

References

Affected packages

Git / github.com/raythahq/raytha

Affected ranges

Type

GIT

Repo

https://github.com/raythahq/raytha

Events

Introduced

Fixed

79001db259d130ac8669da4a59877227c465c344

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.4.6"
        }
    ],
    "cpe": "cpe:2.3:a:raytha:raytha:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ]
}

Affected versions

v0.*

v0.9.0

v0.9.1

v0.9.2

v0.9.3

v0.9.4

v1.*

v1.0.0

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.0.5

v1.0.6

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.1.4

v1.1.5

v1.2.0

v1.3.0

v1.3.1

v1.3.2

v1.3.3

v1.4.1

v1.4.2

v1.4.3

v1.4.4

v1.4.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69246.json"