CVE-2025-55342: Quipux

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiar_password_olvido_validar.php txt_login parameter.

Affected products

• Quipux Quipux: version 4.0.1 only

Published 2025-11-05. Last modified 2026-06-17.