Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6768-v96h-wm7c

Опубликовано: 04 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 5.4

Описание

A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 21%
0.0007
Низкий

2.1 Low

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 5.4
nvd
4 месяца назад

A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 21%
0.0007
Низкий

2.1 Low

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-266