CVE-2025-12283 code-projects Client Details System authorization

Medium 5.3 Published 27 Oct 2025 Updated 7 Jan 2026

Attackers can bypass authorization controls in the Client Details System to access restricted functionality remotely.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-12283?

CVE-2025-12283 is a medium-severity authentication bypass vulnerability in code-projects Client Details System, published on 27 Oct 2025. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Weakness: CWE-639, CWE-285

Which versions are affected by CVE-2025-12283?

It affects 1 product.

Products include Fabian Client Details System.

How do I fix CVE-2025-12283?

No fix has been published for CVE-2025-12283 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-12283 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-12283 exists.

Sources

Also known as GHSA-x2w5-644h-c9p2.