CVE Feed

    Dashboard / CVE / CVE-2025-51741

    CVE-2025-51741

    An issue was discovered in Veal98 Echo Open-Source Community System 2.2 thru 2.3 allowing an unauthenticated attacker to cause the server to send email verification messages to arbitrary users via the /sendEmailCodeForResetPwd endpoint potentially causing a denial of service to the server or the downstream users.

    Published:Nov 25, 2025
    Last Modified:Dec 30, 2025
    EPS:Nov 25, 2025
    EPSS Score:0.00074
    CVSS Score:7.5

    Affected Products

    Vendor
    Echo Project
    Product
    Echo
    Vendor
    Interviewx
    Product
    Echo

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High