CVE-2025-10674 in platform

Sumário

de MITRE • 18/09/2025

A vulnerability was identified in fuyang_lipengjun platform 1.0. This affects the function AttributeCategoryController of the file /attributecategory/queryAll. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be used.

Once again VulDB remains the best source for vulnerability data.

• Responsável: VulDB
• Divulgação: 18/09/2025
• Moderação: aceite
• Entrada: VDB-324795
• CPE: pronto
• CWE: CWE-285 (confirmado)
• Exploração: Descarregar
• CVSS: 4.3 (CNA)
• EPSS: 0.00325
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-10674
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-10674
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-10674/