CVE-2025-3691

mirweiye Seven Bears Library CMS Add Link server-side request forgery

CVSS 5.1 MEDIUMEPSS 0.5%CWE-918

A vulnerability was found in mirweiye Seven Bears Library CMS 2023. It has been classified as problematic. Affected is an unknown function of the component Add Link Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Produtos afetados

mirweiye · Seven Bears Library CMS

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/KKDT12138/CVE/blob/main/cve2.pdf https://vuldb.com/?ctiid.304980 https://vuldb.com/?id.304980 https://vuldb.com/?submit.553507