Madhav-Bhardwaj/CVE-2025-52289

Madhav-Bhardwaj/CVE-2025-52289

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-52289↗
8 HIGH—

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.