Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-11029

Опубликовано: 26 сент. 2025
Источник: nvd
CVSS3: 4.3
CVSS3: 8.8
CVSS2: 5
EPSS Низкий

Описание

A weakness has been identified in givanz Vvveb up to 1.0.7.2. This vulnerability affects unknown code. Executing manipulation can lead to cross-site request forgery. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release."

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:vvveb:vvveb:*:*:*:*:*:*:*:*
Версия до 1.0.7.2 (включая)

EPSS

Процентиль: 12%
0.00039
Низкий

4.3 Medium

CVSS3

8.8 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-352
CWE-352

Связанные уязвимости

CVSS3: 4.3
github
4 месяца назад

A weakness has been identified in givanz Vvveb up to 1.0.7.2. This vulnerability affects unknown code. Executing manipulation can lead to cross-site request forgery. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release."

EPSS

Процентиль: 12%
0.00039
Низкий

4.3 Medium

CVSS3

8.8 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-352
CWE-352