CVE-2025-55796
HIGH
MEDIUM
Priority: 0.05
BB Relevance:
75/100
Published: 2025-11-18
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup confirmation, password resets, email confirmation resends, and email change confirmation. These tokens are generated by hashing the current timestamp formatted as "%d %H:%M:%S" without incorporating any user-specific data or cryptographic randomness. This predictability allows remote attackers to brute-force valid tokens within a small time window, enabling unauthorized account confirmation, password resets, and email change approvals, potentially leading to account takeover.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| openml | openml_frontend | < 2.0.20251111 |
References & Advisories (3)
Product
Product
Exploit
Vendor Advisory