CVE-2025-27416 - CVE House
Back to Database
Status published Medium CVE-2025-27416

Asking For Scratch Username And Password

Vulnerability Description

Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch username and password form. Any user who used the sign in page would be susceptible to any other user signing into their account. As of time of publication, a fix is not available but work on a fix is underway. As a workaround, users should avoid signing in.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-27416

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Scratch-Coding-Hut

View all reports →

Affected Software

Scratch-Coding-Hut.github.io
Vulnerable Versions:
<= 2025-02-28

Timeline

Official Publish: March 1st, 2025
Last Modified: March 4th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)