CVE-2025-28399 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.
Critical CVSS: 9.8

CVE-2025-28399

An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class.
Vendor
Exrick
Product
Xmall
CWE
CWE-269
Yayın Tarihi
2025-04-15 19:16:07
Güncelleme
2025-04-25 16:53:50
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-269 Xmall CRITICAL Exrick 2025

Referanslar

https://github.com/20210607/cve_public/blob/main/CVE-2025-28399.md