Auth bypass in Scratch-Coding-Hut

CVE-2025-31122

scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to login to any account by changing the username in the username field.

Vulnerability class: Broken Authentication

EPSS: 0.003 (26.8th percentile) — read the EPSS interpretation.