Email Confirmation Loop in Vickey Microblogging Platform by Whimsies-YAT

CVE-2025-61775

What is CVE-2025-61775?

A vulnerability present in the Vickey microblogging platform allows for the unexpired email confirmation links to be reused multiple times. This can lead to scenarios where a verified email address receives repeated confirmation emails when the verification link is accessed multiple times. Although it results in increased email traffic, it does not compromise user data. The use of improved validation logic in version 2025.10.0 effectively mitigates this issue, ensuring that confirmation links behave correctly post-verification.

References