CVE-2025-7897 — harry0703 MoneyPrinterTurbo API Endpoint base.py verify_token missing authentication

CVE-2025-7897

harry0703 MoneyPrinterTurbo API Endpoint base.py verify_token missing authentication PUBLISHED

Description (CNA)

A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this issue is the function verify_token of the file app/controllers/base.py of the component API Endpoint. The manipulation leads to missing authentication. The attack may be launched remotely.

Affected (CNA)

Vendor / product	Versions
harry0703 / MoneyPrinterTurbo	affected 1.2.0; affected 1.2.1; affected 1.2.2; affected 1.2.3; affected 1.2.4; affected 1.2.5; affected 1.2.6

CWE

CWE-306, CWE-287

References

https://vuldb.com/?id.317012
https://vuldb.com/?ctiid.317012
https://vuldb.com/?submit.609040

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.