An issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to take over arbitrary user accounts.
References
| Link | Resource |
|---|---|
| http://imonnitcom.com | Broken Link |
| http://monnit.com | Product |
| https://github.com/0xMandor/imonnit-ato-advisory/blob/main/CVE-2025-50433.md | Third Party Advisory |
| https://youtu.be/-BqcdwHgMMA | Exploit |
Configurations
Configuration 1 (hide)
|
History
29 Dec 2025, 15:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:monnit:imonnit:-:*:*:*:cloud_basic:*:*:* cpe:2.3:a:monnit:imonnit:-:*:*:*:cloud_premiere:*:*:* |
|
| First Time |
Monnit imonnit
Monnit |
|
| References | () http://imonnitcom.com - Broken Link | |
| References | () http://monnit.com - Product | |
| References | () https://github.com/0xMandor/imonnit-ato-advisory/blob/main/CVE-2025-50433.md - Third Party Advisory | |
| References | () https://youtu.be/-BqcdwHgMMA - Exploit |
28 Nov 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-640 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
26 Nov 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-26 20:15
Updated : 2025-12-29 15:46
NVD link : CVE-2025-50433
Mitre link : CVE-2025-50433
CVE.ORG link : CVE-2025-50433
JSON object : View
Products Affected
monnit
- imonnit
CWE
CWE-640
Weak Password Recovery Mechanism for Forgotten Password