CNNVD-202510-1515 Information

CNNVD ID

CNNVD-202510-1515

CVE-2025-11609

  • CNNVD Published: 2025-10-11

Description (Chinese)

Code-Projects Hospital Management System是Code-Projects开源的一个医院管理系统。 Code-Projects Hospital Management System 1.0版本存在安全漏洞,该漏洞源于express-session组件中session函数对参数secret的错误操作,可能导致使用硬编码密钥。

Description (English)

The Code-Projects Hospital Management System is a hospital management system open to Code-Projects. There is a security loophole in version 1.0 of Code-Project HSystem, which stems from the error of the copy function against the parameter secret in the extpress-session component, which may lead to the use of a hard-coded key.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Code-Projects

Published

2025-10-11

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md https://vuldb.com/?ctiid.327932 https://vuldb.com/?id.327932 https://vuldb.com/?submit.672589

Share on: