Latest Vulnerabilities Updates: AppSecWorld's CVE Daily Digest for May 04-05, 2025

In the dynamic realm of cybersecurity, staying updated on the latest vulnerabilities is imperative.
This edition of the AppSecWorld's CVE Daily Digest provides a snapshot of the vulnerabilities published in National Vulnerability Database between May 04-05, 2025.
During this period, The National Vulnerability Database published 8, and these new Common Vulnerabilities and Exposures (CVEs) are classified as follows:

Critical: 0
High: 1
Medium: 7
Low: 0
Severity Not Assigned: 0

Identifying and understanding these vulnerabilities are pivotal steps towards enhancing security measures and creating a safer digital environment.
Now, let's delve deeper into AppSecWorld's CVE Daily Digest, spotlighting the Critical and High Severity vulnerabilities that demand immediate attention.

1. CVE-2025-47245
Base Score: 8.1
Base Severity: HIGH
Exploitability Score: 2.2
Impact Score: 5.9
Description: In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.
References: https://github.com/bluewave-labs/Checkmate/commit/d4a60723f490502b3fe6f7f780a85d29bf5d1385
https://github.com/bluewave-labs/Checkmate/pull/2160
https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-7x3q-g6gq-f4mm

CWE-ID: CWE-472
Common Platform Enumerations (CPE): Not Found