CVE-2025-56748

MEDIUM

Academy LMS <= 5.13 - Weak Password Recovery Mechanism via Predictable Reset Tokens

Title source: llm

Description

Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts.

References (1)

Core 1

Core References

Exploit, Mitigation, Third Party Advisory

https://suryadina.com/academy-lms-reset-bruteforce-5q8w2e7t9y/

Scores

CVSS v3 6.4

EPSS 0.0020

EPSS Percentile 10.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-640

Status published

Products (1)

creativeitem/academy_lms < 5.13

Published Oct 15, 2025

Tracked Since Feb 18, 2026