CVE-2025-52338

5.3 mediumEPSS 0.5%

Medium (5.3). EPSS 0.5% chance of exploitation in the next 30 days.

An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass authentication and compromise user accounts via a bruteforce attack.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-288
Published: 2025-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://cwe.mitre.org/data/definitions/521.html
https://cwe.mitre.org/data/definitions/522.html
https://github.com/TrustStackSecurity/Advisories/tree/main/CVE-2025-52338
https://www.logicdata.com/products/webstore-for-erp-ecommerce-integration/

Check your stack JSON