What’s Vulnerable › Vulnerabilities

CVE-2025-47245

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-04 · updated 2026-06-17
• Weakness: CWE-472

Description

In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.

Affected products

• BlueWave Checkmate: through 2.0.2

References

• https://github.com/bluewave-labs/Checkmate/commit/d4a60723f490502b3fe6f7f780a85d29bf5d1385
• https://github.com/bluewave-labs/Checkmate/pull/2160
• https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-7x3q-g6gq-f4mm

Get alerted when CVE-2025-47245 or the next vulnerability affects your stack