CVE-2025-1813

A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Configurations

Configuration 1 (hide)

cpe:2.3:a:zframeworks:zz:*:*:*:*:*:*:*:*

History

28 May 2025, 20:31

Type Values Removed Values Added
CWE CWE-352
CPE cpe:2.3:a:zframeworks:zz:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
First Time Zframeworks
Zframeworks zz
References () https://vuldb.com/?ctiid.298081 - () https://vuldb.com/?ctiid.298081 - Permissions Required, VDB Entry
References () https://www.yuque.com/u123456789-6sobi/cdgcbq/icmicuv9nkkvixb4?singleDoc#%20%E3%80%8AZZ_CSRF%E3%80%8B - () https://www.yuque.com/u123456789-6sobi/cdgcbq/icmicuv9nkkvixb4?singleDoc#%20%E3%80%8AZZ_CSRF%E3%80%8B - Exploit, Third Party Advisory
References () https://vuldb.com/?submit.504281 - () https://vuldb.com/?submit.504281 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.298081 - () https://vuldb.com/?id.298081 - Third Party Advisory, VDB Entry

03 Mar 2025, 22:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.3
v2 : unknown
v3 : unknown
CWE CWE-352
CWE-862

02 Mar 2025, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-02 10:15

Updated : 2025-05-28 20:31


NVD link : CVE-2025-1813

Mitre link : CVE-2025-1813


JSON object : View

Products Affected

zframeworks

  • zz
CWE
CWE-352

Cross-Site Request Forgery (CSRF)