CVE-2025-55342

Medium · 5.3

CVSS

5.3

EPSS

0.3%

Published

Nov 5, 2025

CISA due date

—

The record

Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiar_password_olvido_validar.php txt_login parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed