Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3941 State: PUBLISHED Published: 2025-05-22T12:38:15.750Z Last Updated: 2025-05-22T13:52:36.314Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Tridium Products: Niagara Framework, Niagara Enterprise Security Problem Types: CWE-69 Description: Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and
Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honeywell.com/us/en/product-security#security-notices - https://docs.niagara-community.com/category/tech_bull
CVE ID: CVE-2025-3942 State: PUBLISHED Published: 2025-05-22T12:40:12.581Z Last Updated: 2025-05-22T13:36:18.427Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Tridium Products: Niagara Framework, Niagara Enterprise Security Problem Types: CWE-117 Description: Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framew
iagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tridium.com/us/en/product-security - https://www.honeywell.com/us/en/product-security#security-notices
CVE ID: CVE-2025-3943 State: PUBLISHED Published: 2025-05-22T12:42:13.893Z Last Updated: 2025-05-22T13:19:08.477Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: Tridium Products: Niagara Framework, Niagara Enterprise Security Problem Types: CWE-598 Description: Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Nia
4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://honeywell.com/us/en/product-security#security-notices - https://docs.niagara-community.com/category/tech_bull
CVE ID: CVE-2025-3944 State: PUBLISHED Published: 2025-05-22T12:44:55.511Z Last Updated: 2025-05-22T13:17:37.301Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Tridium Products: Niagara Framework, Niagara Enterprise Security Problem Types: CWE-732 Description: Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Securit
: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honeywell.com/us/en/product-security#security-notices - https://docs.niagara-community.com/category/tech_bull
CVE ID: CVE-2025-3945 State: PUBLISHED Published: 2025-05-22T12:47:00.903Z Last Updated: 2025-05-22T13:17:49.912Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Tridium Products: Niagara Framework, Niagara Enterprise Security Problem Types: CWE-88 Description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Fra
; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://honeywell.com/us/en/product-security#security-notices - https://docs.niagara-community.com/category/tech_bull
CVE ID: CVE-2025-3946 State: PUBLISHED Published: 2025-07-10T20:16:54.743Z Last Updated: 2025-08-04T19:46:15.112Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Honeywell Products: C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, C200E, Wireless Device Manager Problem Types: CWE-430 Description: The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in incorrect handling of packets leading to remote code execution. Honeywell recommends updating to
, which could result in incorrect handling of packets leading to remote code execution. Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1 and OneWireless: 322.5 and 331.1. The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3. The OneWireless WDM affected versions are 322.1 through 322.4 and 330.1 through 330.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://process.honeywell.com/
CVE ID: CVE-2025-3947 State: PUBLISHED Published: 2025-07-10T20:19:13.991Z Last Updated: 2025-08-04T19:46:31.982Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: Honeywell Products: C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, C200E Problem Types: CWE-191 Description: The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA). An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in improper integer data value checking during subtraction leading to a denial of service. Honeywell recommends updating to the most recent version of Ho
ecking during subtraction leading to a denial of service. Honeywell recommends updating to the most recent version of Honeywell Experion PKS:520.2 TCU9 HF1 and 530.1 TCU3 HF1. The affected Experion PKS products are C300 PCNT02, C300 PCNT05, FIM4, FIM8, UOC, CN100, HCA, C300PM, and C200E. The Experion PKS versions affected are from 520.1 through 520.2 TCU9 and from 530 through 530 TCU3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://process.honeywell.com/
CVE ID: CVE-2025-3949 State: PUBLISHED Published: 2025-05-09T08:24:05.349Z Last Updated: 2025-05-09T15:15:30.212Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: seedprod Products: Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode Problem Types: CWE-862 Description: The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'seedprod_lite_get_revisisons' function in all versions up to, and including, 6.18.15. This makes it possible for authenticated attack
_get_revisisons' function in all versions up to, and including, 6.18.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the content of arbitrary landing page revisions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/669b0f30-8958-420c-93c5-0103b71967dd?source=cve - https://plugins.trac.wordpress.org/browser/coming-soon/tags/6.18.15/app/lpage.php#L820 - https://plugins.trac.wordpress.org/changeset/3288645/coming-soon/trunk/app/lpage.php - https://www.seedprod.com/docs/changelog/
CVE ID: CVE-2025-3951 State: PUBLISHED Published: 2025-06-02T06:00:18.686Z Last Updated: 2025-06-02T16:53:55.983Z Vendors: Unknown Products: WP-Optimize Problem Types: CWE-89 SQL Injection Description: The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statuses, which could allow users with the administrator role to conduct SQL Injection attacks in the context of Multi-Site WordPress configurations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/220c195f-3df3-4883-8e0b-a0cf019e6323/
CVE ID: CVE-2025-3952 State: PUBLISHED Published: 2025-05-01T04:22:57.655Z Last Updated: 2025-05-01T13:10:12.167Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: projectopia Products: Projectopia – WordPress Project Management Problem Types: CWE-862 Description: The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'pto_remove_logo' function in all versions up to, and including, 5.1.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary option values on the Wo
ossible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary option values on the WordPress site. This can be leveraged to delete an option that would create an error on the site and deny service to legitimate users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/de7489e8-fe18-4a80-832c-aa62424c538b?source=cve - https://plugins.trac.wordpress.org/browser/projectopia-core/trunk/includes/functions/admin/admin_functions.php#L838 - https://plugins.trac.wordpress.org/changeset/3284330/
CVE ID: CVE-2025-3953 State: PUBLISHED Published: 2025-04-30T05:23:09.097Z Last Updated: 2025-04-30T13:06:49.615Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: veronalabs Products: WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin Problem Types: CWE-862 Description: The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'optionUpdater' function in all versions up to, and including, 14.13.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary plugin setti
makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary plugin settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/07f7ef07-0f14-4b74-8d47-d5dece4954b0?source=cve - https://plugins.trac.wordpress.org/browser/wp-statistics/tags/14.13.2/src/Service/Admin/AjaxOptionUpdater.php#L33 - https://plugins.trac.wordpress.org/changeset/3283791/
CVE ID: CVE-2025-3954 State: PUBLISHED Published: 2025-04-26T21:31:03.683Z Last Updated: 2025-04-28T21:57:19.743Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: ChurchCRM Problem Types: CWE-918 Description: A vulnerability, which was classified as problematic, has been found in ChurchCRM 5.16.0. Affected by this issue is some unknown functionality of the component Referer Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted earl
on is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306290 - https://vuldb.com/?ctiid.306290 - https://vuldb.com/?submit.555938 - https://everydaysparkling.com/ssrf-via-referrer-field-in-churchcrm-v5-16-0/
CVE ID: CVE-2025-3955 State: PUBLISHED Published: 2025-04-27T01:00:08.866Z Last Updated: 2025-04-28T18:09:36.809Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: codeprojects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306291 - https://vuldb.com/?ctiid.306291 - https://vuldb.com/?submit.557036 - https://github.com/HuahuaaCat/cve/blob/main/README.md
CVE ID: CVE-2025-3956 State: PUBLISHED Published: 2025-04-27T03:00:05.886Z Last Updated: 2025-04-28T21:57:34.383Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 201206030 Products: novel-cloud Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in 201206030 novel-cloud 1.4.0 and classified as critical. This vulnerability affects the function RestResp of the file novel-cloud-master/novel-book/novel-book-service/src/main/resources/mapper/BookInfoMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did no
xploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306292 - https://vuldb.com/?ctiid.306292 - https://vuldb.com/?submit.557055 - https://github.com/Fc04dB/novel-cloud-vul/blob/main/navol-cloud-vul.md
CVE ID: CVE-2025-3957 State: PUBLISHED Published: 2025-04-27T03:31:05.367Z Last Updated: 2025-04-28T21:58:17.903Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: opplus Products: springboot-admin Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in opplus springboot-admin 1.0 and classified as critical. This issue affects some unknown processing of the file \src\main\resources\mapper\sys\SysLogDao.xml. The manipulation of the argument order leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306293 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306293 - https://vuldb.com/?ctiid.306293 - https://vuldb.com/?submit.557131 - https://github.com/mapl3miss/SQLi-in-springboot-admin-master/blob/main/sp-adminmaster-Vul/sp-adminmaster.md
CVE ID: CVE-2025-3958 State: PUBLISHED Published: 2025-04-27T04:00:05.624Z Last Updated: 2025-04-28T21:59:47.342Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: withstars Products: Books-Management-System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in withstars Books-Management-System 1.0. It has been classified as problematic. Affected is an unknown function of the file /book_edit_do.html of the component Book Edit Page. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerabili
e exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306294 - https://vuldb.com/?ctiid.306294 - https://vuldb.com/?submit.557146 - https://github.com/caigo8/CVE-md/blob/main/Books-Management-System/XSS.md
CVE ID: CVE-2025-3959 State: PUBLISHED Published: 2025-04-27T04:31:03.597Z Last Updated: 2025-04-28T15:33:33.065Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: withstars Products: Books-Management-System Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /reader_delete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306295 - https://vuldb.com/?ctiid.306295 - https://vuldb.com/?submit.557147 - https://github.com/caigo8/CVE-md/blob/main/Books-Management-System/CSRF.md
CVE ID: CVE-2025-3960 State: PUBLISHED Published: 2025-04-27T06:00:06.236Z Last Updated: 2025-04-28T14:27:42.022Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: withstars Products: Books-Management-System Problem Types: CWE-862, CWE-863 Description: A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supporte
t has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306296 - https://vuldb.com/?ctiid.306296 - https://vuldb.com/?submit.557230 - https://github.com/caigo8/CVE-md/blob/main/Books-Management-System/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE.md
CVE ID: CVE-2025-3961 State: PUBLISHED Published: 2025-04-27T06:31:03.701Z Last Updated: 2025-04-28T14:26:55.845Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: withstars Products: Books-Management-System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no
ublic and may be used. Other parameters might be affected as well. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306297 - https://vuldb.com/?ctiid.306297 - https://vuldb.com/?submit.557231 - https://github.com/caigo8/CVE-md/blob/main/Blog-System/XSS1.md
CVE ID: CVE-2025-3962 State: PUBLISHED Published: 2025-04-27T07:00:05.736Z Last Updated: 2025-04-28T14:25:57.360Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: withstars Products: Books-Management-System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported b
as been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306298 - https://vuldb.com/?ctiid.306298 - https://vuldb.com/?submit.557236 - https://github.com/caigo8/CVE-md/blob/main/Blog-System/XSS2.md
CVE ID: CVE-2025-3963 State: PUBLISHED Published: 2025-04-27T07:31:03.796Z Last Updated: 2025-04-28T14:25:00.540Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: withstars Products: Books-Management-System Problem Types: CWE-862, CWE-863 Description: A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer suppo
loit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306299 - https://vuldb.com/?ctiid.306299 - https://vuldb.com/?submit.557237 - https://github.com/caigo8/CVE-md/blob/main/Blog-System/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE.md
CVE ID: CVE-2025-3964 State: PUBLISHED Published: 2025-04-27T09:00:05.987Z Last Updated: 2025-04-28T15:32:54.128Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: withstars Products: Books-Management-System Problem Types: CWE-352, CWE-862 Description: A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by th
een disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306300 - https://vuldb.com/?ctiid.306300 - https://vuldb.com/?submit.557239 - https://github.com/caigo8/CVE-md/blob/main/Blog-System/CSRF.md