exploitDog

CVE-2025-9936

Опубликовано: 04 сент. 2025

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

A vulnerability was identified in fuyang_lipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Ссылки

https://vuldb.com/?ctiid.322338
Permissions Required
VDB Entry
https://vuldb.com/?id.322338
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.643388
Third Party Advisory
VDB Entry
https://www.cnblogs.com/aibot/p/19063425
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fuyang_lipengjun:platform:1.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.0003

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-266

Связанные уязвимости

GHSA-xpcg-rh9r-mm78

CVSS3: 4.3

github

около 1 месяца назад

A vulnerability was identified in fuyang_lipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

EPSS

Процентиль: 8%

0.0003

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-266