CVE-2025-29036
An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component.
- Score
- CVSS 3.1 5.9 Medium
- Status
- Deferred - cve@mitre.org
- Published
- 2025-04-01
- Last modified
- 2025-04-04
- Weaknesses
- CWE-266
References
- https://github.com/HypeDuke/vulnerable-research/blob/main/CVE-2025-29036
- https://github.com/sahat/hackathon-starter/issues/1326
- https://github.com/sahat/hackathon-starter/pull/1328
