CVE-2025-5323

CVE-2025-5323 is a problematic vulnerability in fossasia open-event-server version 1.19.1, specifically within the Mail Verification Handler's send_email_change_user_email function. This flaw involves reliance on obfuscation or encryption without integrity checking for security-relevant inputs. While remotely exploitable, the attack complexity is high, and exploitation is considered difficult, resulting in a low CVSS score of 3.7. Although the exploit has been publicly disclosed, there is no evidence of active exploitation, no known exploit intelligence (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.