high7.5
CVE-2025-47227
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled.
Impact
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandled. Making both a GET and a POST request to login.php.is sufficient. An unauthenticated attacker can then bypass authentication via administrator account takeover.
Affected products
| Product | Affected versions |
|---|---|
| Netmake ScriptCase | through 9.12.006 |
Versions were read from the advisory text. No structured product data has been published for this record yet.