Medium severity5.3NVD Advisory· Published Nov 5, 2025· Updated Jun 17, 2026
CVE-2025-55342
CVE-2025-55342
Description
Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiar_password_olvido_validar.php txt_login parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- seguridaddigital.ec/research/20251101/report-20251101.en.pdfnvdThird Party Advisory
- minka.gob.ec/quipux-comunitario/quipux-comunitarionvdPermissions Required
News mentions
0No linked articles in our index yet.