Vulnerability Details CVE-2025-13768
WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.9%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2025-13768
-
cpe:2.3:a:uniong:webitr:-
-
cpe:2.3:a:uniong:webitr:2_1_0_27
-
cpe:2.3:a:uniong:webitr:2_1_0_28