CVE-2025-3255: falha de média gravidade em xujiangfei admintwo
xujiangfei admintwo home access control
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.6%
A vulnerability was found in xujiangfei admintwo 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/home. The manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
xujiangfei · admintwoCVEs relacionadas — xujiangfei admintwo
No mesmo produto, das mais perigosas para as menos.
CVE-2025-3254MEDIUMxujiangfei admintwo add server-side request forgeryEPSS 0.6%CVE-2025-3251MEDIUMxujiangfei admintwo updateSet cross site scriptingEPSS 0.4%CVE-2025-3256MEDIUMxujiangfei admintwo updateSet access controlEPSS 0.4%CVE-2025-3253MEDIUMxujiangfei admintwo insertTree cross site scriptingEPSS 0.4%CVE-2025-3252MEDIUMxujiangfei admintwo add cross site scriptingEPSS 0.4%CVE-2025-3257MEDIUMxujiangfei admintwo updateSet cross-site request forgeryEPSS 0.3%