1. Home
  2. CVE Database
  3. CVE-2025-69243
MEDIUM · 5.3

CVE-2025-69243

Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack wi...

Vulnerability Description

Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack with valid logins. This issue was fixed in version 1.5.0.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
RaythaRaytha< 1.5.0

Related Weaknesses (CWE)

CWE-204

References

FAQ

What is CVE-2025-69243?

CVE-2025-69243 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack wi...

How severe is CVE-2025-69243?

CVE-2025-69243 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-69243?

Check the references section above for vendor advisories and patch information. Affected products include: Raytha Raytha.