CVE-2025-29036

Published April 1st, 2025

View on NVD ↗

CVSS v3

5.9

MEDIUM

CVSS v2

N/A

Affected

2

PROJECTS

Description

An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component.

HypeDuke/vulnerable-research

GitHub

sahat/hackathon-starter

A boilerplate for Node.js web applications

GitHub

35.2K