CVE-2025-62527
Taguette vulnerable to password reset link poisoning
- State
- Published
- Severity
- 7.1 High
- Published
- Oct 20, 2025
- Updated
- Oct 20, 2025
- Reserved
- Oct 15, 2025
Description
Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for an attacker to request password reset email containing a malicious link, allowing the attacker to set the email if clicked by the victim. This issue has been patched in version 1.5.0.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.1 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N | GitHub_M |
Weaknesses
- CWE-15 External Control of System or Configuration Setting
Affected Products
| Product | Versions |
|---|---|
taguetteremram44 |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.