CVE-2025-13565
Critical · 9.1CVSS
9.1
EPSS
0.5%
Published
Nov 23, 2025
CISA due date
—
The record
A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|