Token Ownership Mismanagement in LinkJoin by Latkecrszy
CVE-2025-55138

7.4HIGH

Key Information:

Vendor

Latkecrszy

Status
Linkjoin
Vendor
CVE Published:
7 August 2025

What is CVE-2025-55138?

The vulnerability arises from improper handling of token ownership during the password reset process in LinkJoin. This could potentially allow attackers to exploit the authentication flow, leading to unauthorized access or account takeover. Affected users should take immediate action to mitigate risks associated with this flaw.

Affected Version(s)

LinkJoin 0 <= 882f196fb4c20ed518917215f686e61672aecc90

References

https://github.com/Latkecrszy/linkjoin/pull/4

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-55138 : Token Ownership Mismanagement in LinkJoin by Latkecrszy