CVE-2025-29036

Name of the Vulnerable Software and Affected Versions hackathon-starter version 8.1.0

Description The issue allows a remote attacker to escalate privileges via the user.js component. This enables the attacker to gain higher access levels, potentially leading to further exploitation of the system.

Recommendations For hackathon-starter version 8.1.0, consider disabling the user.js component until a patch is available to prevent privilege escalation. Restrict access to sensitive areas of the system to minimize the risk of exploitation.