CVE-2025-70148 is a critical Insecure Direct Object Reference (IDOR) vulnerability in CodeAstro Membership Management System 1.0, allowing unauthenticated attackers to access sensitive membership card data for any user. With a CVSS score of 7.5 (High), this vulnerability requires no authentication or user interaction, enabling attackers to directly request and obtain private information by manipulating a URL parameter. While no active exploits, public exploit code, or significant community discussion have been observed, the high FAUCET Risk Score of 91/100 indicates its severe potential impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:codeastro:membership_management_system:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.