CVE-2025-3981

A vulnerability, which was classified as problematic, has been found in wowjoy ?????????????? Internet Doctor Workstation System 1.0. This issue affects some unknown processing of the file /v1/prescription/details/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://github.com/38279/3/issues/1 Exploit Issue Tracking
https://github.com/38279/3/issues/1 Exploit Issue Tracking
https://vuldb.com/?ctiid.306317 Permissions Required VDB Entry
https://vuldb.com/?id.306317 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:wowjoy:internet_doctor_workstation_system:1.0:*:*:*:*:*:*:*

History

12 May 2025, 19:05

Type Values Removed Values Added
CPE cpe:2.3:a:wowjoy:internet_doctor_workstation_system:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
First Time Wowjoy
Wowjoy internet Doctor Workstation System
References () https://vuldb.com/?id.306317 - () https://vuldb.com/?id.306317 - Third Party Advisory, VDB Entry
References () https://github.com/38279/3/issues/1 - () https://github.com/38279/3/issues/1 - Exploit, Issue Tracking
References () https://vuldb.com/?ctiid.306317 - () https://vuldb.com/?ctiid.306317 - Permissions Required, VDB Entry
CWE CWE-862

28 Apr 2025, 14:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.3
v2 : unknown
v3 : unknown
CWE CWE-266
CWE-285

27 Apr 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-27 19:15

Updated : 2025-05-12 19:05


NVD link : CVE-2025-3981

Mitre link : CVE-2025-3981


JSON object : View

Products Affected

wowjoy

  • internet_doctor_workstation_system
CWE
CWE-862

Missing Authorization