CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.4. See the original NVD description below for full technical details.
CVE
CVE-2025-56748
Severity
MEDIUM
CVSS
6.4
EPSS
0.21%
Original NVD Description
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts.
Related CVEs
Other vulnerabilities affecting the same vendor(s)