CVE-2025-13768 HIGH

CVE-2025-13768: Uniong｜WebITR - Authorization Bypass

Vendor Uniong
Product WebITR
Weakness CWE-639 · IDOR
Published November 28, 2025
Last update November 28, 2025
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.

Key dates

02Disclosure timeline

November 28, 2025 CVE published
November 28, 2025 Record updated