CVE-2025-3967

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-3967
A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS

No CVSS.

References
Link Resource
https://github.com/uglory-gll/javasec/blob/main/paicoding.md Exploit Third Party Advisory
https://github.com/uglory-gll/javasec/blob/main/paicoding.md Exploit Third Party Advisory
https://github.com/uglory-gll/javasec/blob/main/paicoding.md#22articleapipost-horizontal-overstepping-of-authority Exploit Third Party Advisory
https://vuldb.com/?ctiid.306303 Permissions Required VDB Entry
https://vuldb.com/?id.306303 Third Party Advisory VDB Entry
https://vuldb.com/?submit.557251 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:itwanger:paicoding:1.0.3:*:*:*:*:*:*:*
History

12 May 2025, 19:08

Type Values Removed Values Added
CPE cpe:2.3:a:itwanger:paicoding:1.0.3:*:*:*:*:*:*:*
First Time Itwanger
Itwanger paicoding
CWE NVD-CWE-noinfo
References () https://github.com/uglory-gll/javasec/blob/main/paicoding.md - () https://github.com/uglory-gll/javasec/blob/main/paicoding.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.306303 - () https://vuldb.com/?ctiid.306303 - Permissions Required, VDB Entry
References () https://github.com/uglory-gll/javasec/blob/main/paicoding.md#22articleapipost-horizontal-overstepping-of-authority - () https://github.com/uglory-gll/javasec/blob/main/paicoding.md#22articleapipost-horizontal-overstepping-of-authority - Exploit, Third Party Advisory
References () https://vuldb.com/?submit.557251 - () https://vuldb.com/?submit.557251 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.306303 - () https://vuldb.com/?id.306303 - Third Party Advisory, VDB Entry

28 Apr 2025, 15:15

Type Values Removed Values Added
CWE CWE-266
CWE-285
CVSS v2 : unknown
v3 : 5.4 		v2 : unknown
v3 : unknown

27 Apr 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-27 11:15

Updated : 2025-05-12 19:08

NVD link : CVE-2025-3967

Mitre link : CVE-2025-3967

JSON object : View

Products Affected

itwanger

  • paicoding
CWE
NVD-CWE-noinfo