CVE-2025-30064
Last modified
CVE-2025-30064 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. EPSS estimates a 0.08% chance of exploitation in the next 30 days.
Description
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to generate a session for any user.
Metrics
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-30064?
How severe is CVE-2025-30064?
How do I fix CVE-2025-30064?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-30059In the PrepareCDExportJSON.pl service, the "getPerfServiceId…6.9
- CVE-2025-3006A vulnerability was found in PHPGurukul e-Diary Management S…9.8
- CVE-2025-30060In the ReturnUserUnitsXML.pl service, the "getUserInfo" func…6.9
- CVE-2025-30061In the "utils/Reporter/OpenReportWindow.pl" service, there i…6.9
- CVE-2025-30062In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUni…6.9
- CVE-2025-30063The configuration file containing database logins and passwo…9.4
- CVE-2025-30065Schema parsing in the parquet-avro module of Apache Parquet …9.8
- CVE-2025-30066tj-actions changed-files before 46 allows remote attackers t…8.6
- CVE-2025-30067Improper Control of Generation of Code ('Code Injection') vu…7.2
- CVE-2025-3007A vulnerability was found in Novastar CX40 up to 2.44.0. It …5.5
- CVE-2025-30072Tiiwee X1 Alarm System TWX1HAKV2 allows Authentication Bypas…7.6
- CVE-2025-30073An issue was discovered in OPC cardsystems Webapp Aufwertung…7.5
Are you affected by CVE-2025-30064?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST