CVE-2025-10676

Summary

A weakness has been identified in fuyang_lipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.

Affected Software

Weaknesses

• CWE-285: Improper Authorization
• CWE-266: Incorrect Privilege Assignment

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://vuldb.com/?submit.653344
• https://www.cnblogs.com/aibot/p/19063431

References

• https://vuldb.com/?id.324797
• https://vuldb.com/?ctiid.324797
• https://vuldb.com/?submit.653344
• https://www.cnblogs.com/aibot/p/19063431

• ←Previous
• Next→