CVEvulnerability
CVE-2025-62527
7.1 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-10-20
- Last modified
- 2026-10-08
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
- Weaknesses
- CWE-15
Description
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been patched in version 1.5.0.
Affected configurations
• taguette taguette (<= 1.5.0)
Related
Weakness · CWE (1)
- CWE-15 External Control of System or Configuration Setting weakness
References
- https://github.com/remram44/taguette/security/advisories/GHSA-7rc8-5c8q-jr6j Issue Tracking, Vendor Advisory
- https://gitlab.com/remram44/taguette/-/issues/331 Issue Tracking, Vendor Advisory