Critical severityGHSA Advisory· Published Oct 8, 2025· Updated Apr 15, 2026

CVE-2025-10352

Description

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
melisplatform/melis-corePackagist	< 5.3.11	5.3.11

Affected products

Melisplatform/Melis CoreGHSA
Range: < 5.3.11
ghsa-coords
pkg:composer/melisplatform/melis-core
Range: < 5.3.11

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-p3vc-g9f9-mgw4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-10352ghsaADVISORY
github.com/melisplatform/melis-core/commit/e938dd14e108b921e6a399b35976dfb429c41df5ghsaWEB
www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-melis-platformnvdWEB

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000