CVEvulnerability

CVE-2025-55301

6.7 MEDIUM Published 2025-08-25 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-08-25
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses: CWE-20

Description

The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local storage to edit the account's username locally. This issue has been patched in version 1.1.

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References

https://github.com/The-Scratch-Channel/tsc-web-client/discussions/77 github.com
https://github.com/The-Scratch-Channel/tsc-web-client/releases/tag/v1.1 github.com
https://github.com/The-Scratch-Channel/tsc-web-client/security/advisories/GHSA-9q4f-4vjm-7gp2 github.com

CVE-2025-55301

Description

Related

Weakness · CWE (1)

References