Server-Side Security Bypass in Wivia by Uchida
CVE-2025-47697

6.9MEDIUM

Key Information:

Vendor

Uchida Yoko Co., Ltd.

Status
Wivia 5
Vendor
CVE Published:
30 May 2025

What is CVE-2025-47697?

A security vulnerability exists in Wivia 5 across all versions, where an unauthenticated attacker can exploit server-side enforcement mechanisms. This flaw enables such attackers to bypass authentication and gain unauthorized access to the platform, potentially allowing them to operate as a moderator user. Organizations using this product should take immediate action to mitigate risks associated with this security issue.

Affected Version(s)

wivia 5 all versions

References

https://www.uchida.co.jp/wivia/support02.html
https://jvn.jp/en/jp/JVN51394666/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-47697 : Server-Side Security Bypass in Wivia by Uchida