GHSA-p3vc-g9f9-mgw4Critical

Melis Platform CMS Unauthenticated Admin Account Creation

Published
October 8, 2025
Last Modified
October 9, 2025

🔗 CVE IDs covered (1)

CVE-2025-10352 →

📋 Description

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.

🎯 Affected products1

  • composer/melisplatform/melis-core:< 5.3.11

🔗 References (5)