Vulnerability Description
WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Uniong | Webitr | < 2_1_0_34 |
Related Weaknesses (CWE)
References
- https://www.twcert.org.tw/en/cp-139-10539-21f45-2.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-10538-6a26d-1.htmlThird Party Advisory
FAQ
What is CVE-2025-13768?
CVE-2025-13768 is a vulnerability with a CVSS score of 7.5 (HIGH). WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must firs...
How severe is CVE-2025-13768?
CVE-2025-13768 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-13768?
Check the references section above for vendor advisories and patch information. Affected products include: Uniong Webitr.