Bdtask Pharmacy Management System CVE-2025-12288

No vendor-released patch has been identified at time of analysis, as the vendor did not respond to early disclosure contact. Organizations using Bdtask Pharmacy Management System should implement the following compensating controls: (1) Restrict network access to the /user/edit_user/ endpoint using a WAF (Web Application Firewall) or API gateway, allowing requests only from trusted internal networks; (2) Implement strict role-based access control (RBAC) validation at the application layer to verify user permissions before executing profile modifications - consider adding server-side session validation to ensure the authenticated user has explicit permission to edit the target user's profile; (3) Enable comprehensive audit logging on all user profile modifications to detect unauthorized changes and facilitate incident investigation; (4) Consider upgrading to a successor version (beyond 9.4) if available from the vendor, or evaluate alternative pharmacy management systems with active security support. Monitor Bdtask's GitHub or official channels for eventual patch releases. Given the low EPSS score and authentication requirement, this remediation should be prioritized below network segmentation and multi-factor authentication deployments.