Critical severityOSV Advisory· Published Mar 31, 2025· Updated Apr 15, 2026

CVE-2025-31122

Description

scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to login to any account by changing the username in the username field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Scratch Coding Hut/Scratch Coding Hut.github.ioOSV2 versions
1.0-beta, 1.0-beta2, 1.0-beta3+ 1 more
- (no CPE)range: 1.0-beta, 1.0-beta2, 1.0-beta3
- (no CPE)range: <=1.0-beta3

Patches

Vulnerability mechanics

References

github.com/Scratch-Coding-Hut/Scratch-Coding-Hut.github.io/issues/56nvd
github.com/Scratch-Coding-Hut/Scratch-Coding-Hut/security/advisories/GHSA-mmg3-567w-v9j2nvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000