CVE-2025-2653

A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://vuldb.com/?ctiid.300668 VDB Entry Permissions Required
https://vuldb.com/?id.300668 VDB Entry Third Party Advisory
https://vuldb.com/?submit.519927 VDB Entry Third Party Advisory
https://www.yuque.com/yuqueyonghuveuwuh/aveeid/nvg6rd3qw1ww83yo?singleDoc Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:qianfox:foxcms:1.25:*:*:*:*:*:*:*

History

16 Jul 2025, 15:04

Type Values Removed Values Added
References () https://vuldb.com/?id.300668 - () https://vuldb.com/?id.300668 - VDB Entry, Third Party Advisory
References () https://vuldb.com/?submit.519927 - () https://vuldb.com/?submit.519927 - VDB Entry, Third Party Advisory
References () https://www.yuque.com/yuqueyonghuveuwuh/aveeid/nvg6rd3qw1ww83yo?singleDoc - () https://www.yuque.com/yuqueyonghuveuwuh/aveeid/nvg6rd3qw1ww83yo?singleDoc - Broken Link
References () https://vuldb.com/?ctiid.300668 - () https://vuldb.com/?ctiid.300668 - VDB Entry, Permissions Required
First Time Qianfox foxcms
Qianfox
CPE cpe:2.3:a:qianfox:foxcms:1.25:*:*:*:*:*:*:*

23 Mar 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-23 16:15

Updated : 2025-07-16 15:04


NVD link : CVE-2025-2653

Mitre link : CVE-2025-2653


JSON object : View

Products Affected

qianfox

  • foxcms
CWE
CWE-285

Improper Authorization

CWE-266

Incorrect Privilege Assignment