CVE-2025-8266 in yanyutao0402 ChanCMS情報

要約 (英語)

A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical. Affected by this vulnerability is the function getArticle of the file app/modules/cms/controller/collect.js. The manipulation of the argument targetUrl leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.3 is able to address this issue. It is recommended to upgrade the affected component.

公開

2025年07月28日

エントリ

VulDB provides additional information and datapoints for this CVE:

識別子	脆弱性	CWE	悪用可	対策	CVE
317857	yanyutao0402 ChanCMS collect.js getArticle 特権昇格	502	概念実証	公式な修正	CVE-2025-8266

説明

CPE

CWE

CVSS

エクスプロイト

履歴

差分

リンクする

脅威インテリジェンス

API JSON

API XML

API CSV

◂ 前概要次 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!