Insecure Permissions in FairSketch Rise Ultimate Project Manager & CRM
CVE-2025-63293

6.5MEDIUM

Key Information:

Vendor

FairSketch

Status
Rise Ultimate Project Manager & CRM
Vendor
CVE Published:
3 November 2025

What is CVE-2025-63293?

The FairSketch Rise Ultimate Project Manager & CRM version 3.9.4 is susceptible to insecure permissions, allowing remote authenticated users to improperly access and manipulate tickets. This vulnerability arises from insufficient authorization checks within the ticketing and commenting API, permitting unauthorized users to append comments or upload attachments to tickets where they should not hold view or edit rights. This flaw poses a significant risk to data integrity and confidentiality, necessitating immediate attention to secure the application against inappropriate access.

References

http://fairsketch.com
https://medium.com/@barrattjack89/cve-2025-63293-insecure...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-63293 : Insecure Permissions in FairSketch Rise Ultimate Project Manager & CRM