CVE-2025-2637 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability, which was classified as problematic, has been found in JIZHICMS up to 1.7.0. Affected by this issue is some unknown functionality of the file /…
Medium CVSS: 5.3

CVE-2025-2637

A vulnerability, which was classified as problematic, has been found in JIZHICMS up to 1.7.0. Affected by this issue is some unknown functionality of the file /user/userinfo.html of the component Account Profile Page. The manipulation of the argument jifen leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Vendor
Jizhicms
Product
Jizhicms
CWE
CWE-266
Yayın Tarihi
2025-03-23 00:15:26
Güncelleme
2025-04-02 15:37:24
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-266 Jizhicms MEDIUM Jizhicms 2025

Referanslar

https://github.com/H3rmesk1t/vulnerability-paper/blob/main/jizhiCMS-1.7.0-Incorrect%20Access%20Control.md https://vuldb.com/?ctiid.300638 https://vuldb.com/?id.300638 https://vuldb.com/?submit.519632 https://github.com/H3rmesk1t/vulnerability-paper/blob/main/jizhiCMS-1.7.0-Incorrect%20Access%20Control.md