CVE-2025-63807 -

CVE ID : CVE-2025-63807 Published : 20 Nov 2025, 9:16 p.m. | 1 hour, 30 minutes ago Description : An issue was discovered in weijiang1994 university-bbs (aka Blogin) in commit 9e06bab430bfc729f27b4284ba7570db3b11ce84 (2025-01-13). A weak verification code generation mechanism combined with missing rate limiting allows attackers to perform brute-force attacks on verification codes without authentication. Successful exploitation may result in account takeover via password reset or other authentication bypass methods. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...