CVE-2025-3691

mirweiye Seven Bears Library CMS Add Link server-side request forgery

CVSS 5.1 MEDIUMEPSS 0.5%CWE-918

A vulnerability was found in mirweiye Seven Bears Library CMS 2023. It has been classified as problematic. Affected is an unknown function of the component Add Link Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Productos afectados

mirweiye · Seven Bears Library CMS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/KKDT12138/CVE/blob/main/cve2.pdf https://vuldb.com/?ctiid.304980 https://vuldb.com/?id.304980 https://vuldb.com/?submit.553507