CVE-2025-3257: falha de média gravidade em xujiangfei admintwo
xujiangfei admintwo updateSet cross-site request forgery
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
xujiangfei · admintwoCVEs relacionadas — xujiangfei admintwo
No mesmo produto, das mais perigosas para as menos.
CVE-2025-3254MEDIUMxujiangfei admintwo add server-side request forgeryEPSS 0.6%CVE-2025-3255MEDIUMxujiangfei admintwo home access controlEPSS 0.6%CVE-2025-3251MEDIUMxujiangfei admintwo updateSet cross site scriptingEPSS 0.4%CVE-2025-3256MEDIUMxujiangfei admintwo updateSet access controlEPSS 0.4%CVE-2025-3253MEDIUMxujiangfei admintwo insertTree cross site scriptingEPSS 0.4%CVE-2025-3252MEDIUMxujiangfei admintwo add cross site scriptingEPSS 0.4%