Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities by Odyssey
CVE-2025-2220 (GCVE-0-2025-2220)
Vulnerability from nvd – Published: 2025-03-12 01:00 – Updated: 2025-03-12 14:56
VLAI
Title
Odyssey CMS reCAPTCHA odyssey_contact_form.php key management
Summary
A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odyssey_contact_form/odyssey_contact_form.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key management error. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-320 - Key Management Error
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.299292 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.299292 | signaturepermissions-required |
| https://vuldb.com/?submit.512367 | third-party-advisory |
| https://github.com/secuserx/CVE/blob/main/%5BHard… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Odyssey | CMS |
Affected:
10.0
Affected: 10.1 Affected: 10.2 Affected: 10.3 Affected: 10.4 Affected: 10.5 Affected: 10.6 Affected: 10.7 Affected: 10.8 Affected: 10.9 Affected: 10.10 Affected: 10.11 Affected: 10.12 Affected: 10.13 Affected: 10.14 Affected: 10.15 Affected: 10.16 Affected: 10.17 Affected: 10.18 Affected: 10.19 Affected: 10.20 Affected: 10.21 Affected: 10.22 Affected: 10.23 Affected: 10.24 Affected: 10.25 Affected: 10.26 Affected: 10.27 Affected: 10.28 Affected: 10.29 Affected: 10.30 Affected: 10.31 Affected: 10.32 Affected: 10.33 Affected: 10.34 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-2220",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-12T14:56:16.816048Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-12T14:56:55.846Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"reCAPTCHA Handler"
],
"product": "CMS",
"vendor": "Odyssey",
"versions": [
{
"status": "affected",
"version": "10.0"
},
{
"status": "affected",
"version": "10.1"
},
{
"status": "affected",
"version": "10.2"
},
{
"status": "affected",
"version": "10.3"
},
{
"status": "affected",
"version": "10.4"
},
{
"status": "affected",
"version": "10.5"
},
{
"status": "affected",
"version": "10.6"
},
{
"status": "affected",
"version": "10.7"
},
{
"status": "affected",
"version": "10.8"
},
{
"status": "affected",
"version": "10.9"
},
{
"status": "affected",
"version": "10.10"
},
{
"status": "affected",
"version": "10.11"
},
{
"status": "affected",
"version": "10.12"
},
{
"status": "affected",
"version": "10.13"
},
{
"status": "affected",
"version": "10.14"
},
{
"status": "affected",
"version": "10.15"
},
{
"status": "affected",
"version": "10.16"
},
{
"status": "affected",
"version": "10.17"
},
{
"status": "affected",
"version": "10.18"
},
{
"status": "affected",
"version": "10.19"
},
{
"status": "affected",
"version": "10.20"
},
{
"status": "affected",
"version": "10.21"
},
{
"status": "affected",
"version": "10.22"
},
{
"status": "affected",
"version": "10.23"
},
{
"status": "affected",
"version": "10.24"
},
{
"status": "affected",
"version": "10.25"
},
{
"status": "affected",
"version": "10.26"
},
{
"status": "affected",
"version": "10.27"
},
{
"status": "affected",
"version": "10.28"
},
{
"status": "affected",
"version": "10.29"
},
{
"status": "affected",
"version": "10.30"
},
{
"status": "affected",
"version": "10.31"
},
{
"status": "affected",
"version": "10.32"
},
{
"status": "affected",
"version": "10.33"
},
{
"status": "affected",
"version": "10.34"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "secuserx (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odyssey_contact_form/odyssey_contact_form.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key management error. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "de",
"value": "Es wurde eine problematische Schwachstelle in Odyssey CMS bis 10.34 ausgemacht. Es geht dabei um eine nicht klar definierte Funktion der Datei /modules/odyssey_contact_form/odyssey_contact_form.php der Komponente reCAPTCHA Handler. Durch Manipulation des Arguments g-recaptcha-response mit unbekannten Daten kann eine key management error-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.7,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-320",
"description": "Key Management Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-12T01:00:06.163Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-299292 | Odyssey CMS reCAPTCHA odyssey_contact_form.php key management",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.299292"
},
{
"name": "VDB-299292 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.299292"
},
{
"name": "Submit #512367 | Odyssey CMS 10.35 Use of Hard-coded, Security-relevant Constants",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.512367"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/secuserx/CVE/blob/main/%5BHardcoded%20reCAPTCHA%20secret%20key%5D%20found%20in%20Odyssey%20CMS%2010.35%20-%20(odyssey_contact_form.php).md"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-03-11T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-03-11T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-03-11T16:23:33.000Z",
"value": "VulDB entry last update"
}
],
"title": "Odyssey CMS reCAPTCHA odyssey_contact_form.php key management"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-2220",
"datePublished": "2025-03-12T01:00:06.163Z",
"dateReserved": "2025-03-11T15:18:30.501Z",
"dateUpdated": "2025-03-12T14:56:55.846Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-2220 (GCVE-0-2025-2220)
Vulnerability from cvelistv5 – Published: 2025-03-12 01:00 – Updated: 2025-03-12 14:56
VLAI
Title
Odyssey CMS reCAPTCHA odyssey_contact_form.php key management
Summary
A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odyssey_contact_form/odyssey_contact_form.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key management error. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-320 - Key Management Error
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.299292 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.299292 | signaturepermissions-required |
| https://vuldb.com/?submit.512367 | third-party-advisory |
| https://github.com/secuserx/CVE/blob/main/%5BHard… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Odyssey | CMS |
Affected:
10.0
Affected: 10.1 Affected: 10.2 Affected: 10.3 Affected: 10.4 Affected: 10.5 Affected: 10.6 Affected: 10.7 Affected: 10.8 Affected: 10.9 Affected: 10.10 Affected: 10.11 Affected: 10.12 Affected: 10.13 Affected: 10.14 Affected: 10.15 Affected: 10.16 Affected: 10.17 Affected: 10.18 Affected: 10.19 Affected: 10.20 Affected: 10.21 Affected: 10.22 Affected: 10.23 Affected: 10.24 Affected: 10.25 Affected: 10.26 Affected: 10.27 Affected: 10.28 Affected: 10.29 Affected: 10.30 Affected: 10.31 Affected: 10.32 Affected: 10.33 Affected: 10.34 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-2220",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-12T14:56:16.816048Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-12T14:56:55.846Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"reCAPTCHA Handler"
],
"product": "CMS",
"vendor": "Odyssey",
"versions": [
{
"status": "affected",
"version": "10.0"
},
{
"status": "affected",
"version": "10.1"
},
{
"status": "affected",
"version": "10.2"
},
{
"status": "affected",
"version": "10.3"
},
{
"status": "affected",
"version": "10.4"
},
{
"status": "affected",
"version": "10.5"
},
{
"status": "affected",
"version": "10.6"
},
{
"status": "affected",
"version": "10.7"
},
{
"status": "affected",
"version": "10.8"
},
{
"status": "affected",
"version": "10.9"
},
{
"status": "affected",
"version": "10.10"
},
{
"status": "affected",
"version": "10.11"
},
{
"status": "affected",
"version": "10.12"
},
{
"status": "affected",
"version": "10.13"
},
{
"status": "affected",
"version": "10.14"
},
{
"status": "affected",
"version": "10.15"
},
{
"status": "affected",
"version": "10.16"
},
{
"status": "affected",
"version": "10.17"
},
{
"status": "affected",
"version": "10.18"
},
{
"status": "affected",
"version": "10.19"
},
{
"status": "affected",
"version": "10.20"
},
{
"status": "affected",
"version": "10.21"
},
{
"status": "affected",
"version": "10.22"
},
{
"status": "affected",
"version": "10.23"
},
{
"status": "affected",
"version": "10.24"
},
{
"status": "affected",
"version": "10.25"
},
{
"status": "affected",
"version": "10.26"
},
{
"status": "affected",
"version": "10.27"
},
{
"status": "affected",
"version": "10.28"
},
{
"status": "affected",
"version": "10.29"
},
{
"status": "affected",
"version": "10.30"
},
{
"status": "affected",
"version": "10.31"
},
{
"status": "affected",
"version": "10.32"
},
{
"status": "affected",
"version": "10.33"
},
{
"status": "affected",
"version": "10.34"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "secuserx (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odyssey_contact_form/odyssey_contact_form.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key management error. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "de",
"value": "Es wurde eine problematische Schwachstelle in Odyssey CMS bis 10.34 ausgemacht. Es geht dabei um eine nicht klar definierte Funktion der Datei /modules/odyssey_contact_form/odyssey_contact_form.php der Komponente reCAPTCHA Handler. Durch Manipulation des Arguments g-recaptcha-response mit unbekannten Daten kann eine key management error-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.7,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-320",
"description": "Key Management Error",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-12T01:00:06.163Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-299292 | Odyssey CMS reCAPTCHA odyssey_contact_form.php key management",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.299292"
},
{
"name": "VDB-299292 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.299292"
},
{
"name": "Submit #512367 | Odyssey CMS 10.35 Use of Hard-coded, Security-relevant Constants",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.512367"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/secuserx/CVE/blob/main/%5BHardcoded%20reCAPTCHA%20secret%20key%5D%20found%20in%20Odyssey%20CMS%2010.35%20-%20(odyssey_contact_form.php).md"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-03-11T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-03-11T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-03-11T16:23:33.000Z",
"value": "VulDB entry last update"
}
],
"title": "Odyssey CMS reCAPTCHA odyssey_contact_form.php key management"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-2220",
"datePublished": "2025-03-12T01:00:06.163Z",
"dateReserved": "2025-03-11T15:18:30.501Z",
"dateUpdated": "2025-03-12T14:56:55.846Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}