« Volver al listado

CVE-2025-55301

Estado: AplazadaMedia (6.7)—

The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local storage to edit the account's username locally. This issue has been patched in version 1.1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Scratch Channel — Scratch ChannelAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-55301",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-55301",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-25T16:03:11.062852Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.4
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "The-Scratch-Channel",
          "product": "the-scratch-channel.github.io",
          "versions": [
            {
              "status": "affected",
              "version": "= 1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-08-25T16:15:31.390",
  "references": [
    {
      "url": "https://github.com/The-Scratch-Channel/tsc-web-client/discussions/77",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/The-Scratch-Channel/tsc-web-client/releases/tag/v1.1",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/The-Scratch-Channel/tsc-web-client/security/advisories/GHSA-9q4f-4vjm-7gp2",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local storage to edit the account's username locally. This issue has been patched in version 1.1."
    },
    {
      "lang": "es",
      "value": "El Scratch Channel es un sitio web de noticias. En la versión 1, es posible acceder a la aplicación en las herramientas de desarrollo y hacer clic en el almacenamiento local para editar el nombre de usuario de la cuenta localmente. Este problema se ha corregido en la versión 1.1."
    }
  ],
  "lastModified": "2026-06-17T09:41:36.847",
  "sourceIdentifier": "security-advisories@github.com"
}