CVE Feed

    Dashboard / CVE / CVE-2025-59288

    CVE-2025-59288

    Improper verification of cryptographic signature in Github: Playwright allows an unauthorized attacker to perform spoofing over an adjacent network.

    Published:Oct 14, 2025
    Last Modified:Feb 22, 2026
    EPS:Oct 14, 2025
    EPSS Score:0.00056
    CVSS Score:5.3

    Affected Products

    Vendor
    Github
    Product
    Github
    Vendor
    Microsoft
    Product
    Azure Playwright
    Vendor
    Microsoft
    Product
    Playwright

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-475 Signature Spoofing by Improper Validation

    Related CVEs

    CVE-2021-22863 (CVSS 8.1) — An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allow…
    CVE-2021-22862 (CVSS 6.5) — An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authentica…
    CVE-2021-22861 (CVSS 6.5) — An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated…
    CVE-2020-10519 (CVSS 8.8) — A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when …
    CVE-2020-10517 (CVSS 4.3) — An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated…
    CVE-2020-10518 (CVSS 8.8) — A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when …
    CVE-2020-10516 (CVSS 9.8) — An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an or…
    CVE-2017-18365 (CVSS 9.8) — The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthe…
    CVE-2012-2055 (CVSS 7.5) — GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High