Vulnerability Description
A vulnerability was found in JhumanJ OpnForm up to 1.9.3. This issue affects some unknown processing of the file /show/integrations. Performing manipulation results in missing authorization. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The patch is named 11d97d78f2de2cb49f79baed6bde8b611ec1f384. It is recommended to apply a patch to fix this issue.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jhumanj | Opnform | <= 1.9.3 |
Related Weaknesses (CWE)
References
- https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/ExploitThird Party Advisory
- https://github.com/JhumanJ/OpnForm/pull/900/commits/11d97d78f2de2cb49f79baed6bdePatch
- https://vuldb.com/?ctiid.327376Permissions RequiredVDB Entry
- https://vuldb.com/?id.327376Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.666880Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-11439?
CVE-2025-11439 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability was found in JhumanJ OpnForm up to 1.9.3. This issue affects some unknown processing of the file /show/integrations. Performing manipulation results in missing authorization. Remote ex...
How severe is CVE-2025-11439?
CVE-2025-11439 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-11439?
Check the references section above for vendor advisories and patch information. Affected products include: Jhumanj Opnform.