Description
FUXA 1.2.8 and prior contains an Authentication Bypass vulnerability leading to Remote Code Execution (RCE). The vulnerability exists in the server/api/jwt-helper.js middleware, which improperly trusts the HTTP "Referer" header to validate internal requests. A remote unauthenticated attacker can bypass JWT authentication by spoofing the Referer header to match the server's host. Successful exploitation allows the attacker to access the protected /api/runscript endpoint and execute arbitrary Node.js code on the server.
INFO
Published Date :
2026-02-24T00:00:00.000Z
Last Modified :
2026-02-25T16:31:17.905Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2025-69985 vulnerability.
| Vendors | Products |
|---|---|
| Frangoteam |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-69985.
