CVE-2025-15398
CVE-2025-15398 is a low-severity vulnerability in Uatech Badaso with a CVSS 3.x base score of 3.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-640.
Key facts
- Severity: Low (CVSS 3.x base score 3.7)
- CVSS v2: 2.6
- CVSS v4: 2.9
- EPSS exploit prediction: 0% (38th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-206105
- Weakness: CWE-640
- Affected product: Uatech Badaso
- Published:
- Last modified:
Description
A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAuthController.php of the component Token Handler. Such manipulation leads to weak password recovery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Frequently asked questions
- What is CVE-2025-15398?
- A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAuthController.php of the component Token Handler. Such manipulation leads to weak password recovery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- How severe is CVE-2025-15398?
- CVE-2025-15398 has a CVSS 3.x base score of 3.7, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
- Is CVE-2025-15398 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2025-15398?
- CVE-2025-15398 affects Uatech Badaso. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2025-15398?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2025-15398 have an EU (EUVD) identifier?
- Yes. CVE-2025-15398 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-206105.
- When was CVE-2025-15398 published?
- CVE-2025-15398 was published on 2025-12-31 and last updated on 2026-06-17.
References
- https://note-hxlab.wetolink.com/share/HG1CWbb7FVnq
- https://note-hxlab.wetolink.com/share/HG1CWbb7FVnq#-span--strong-step-1--trigger-password-reset-for-victim--strong---span-
- https://vuldb.com/?ctiid.339207
- https://vuldb.com/?id.339207
- https://vuldb.com/?submit.720129
Affected products (1)
- cpe:2.3:a:uatech:badaso:*:*:*:*:*:*:*:*
More vulnerabilities in Uatech Badaso
- CVE-2025-52353 — Critical (CVSS 9.8): An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload…
- CVE-2022-41705 — Critical (CVSS 9.8): Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This…
- CVE-2022-41711 — Critical (CVSS 9.8): Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This…
- CVE-2023-38970 — Medium (CVSS 5.4): Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code…
- CVE-2023-38971 — Medium (CVSS 5.4): Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code…
- CVE-2023-38969 — Medium (CVSS 5.4): Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted…
All CVEs affecting Uatech Badaso →
Other CWE-640 vulnerabilities
- CVE-2025-63314 — Critical (CVSS 10.0): A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to…
- CVE-2023-7028 — Critical (CVSS 10.0): An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9,…
- CVE-2026-13019 — Critical (CVSS 9.8): Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes have a missing authentication for…
- CVE-2026-37106 — Critical (CVSS 9.8): An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register…
- CVE-2026-12417 — Critical (CVSS 9.8): The SignUp & SignIn plugin for WordPress is vulnerable to Authentication Bypass via Weak Password Reset Validation…
- CVE-2026-12416 — Critical (CVSS 9.8): The Invoice Generator plugin for WordPress is vulnerable to Account Takeover via Password Reset in all versions up to,…