CVE-2025-9210 in Ship Property Management System信息

摘要

由 VulDB • 2026-08-18

在Otalio Ship Property Management System版本低于2.22.0中，JSON Web Token (JWT)缺少签名验证机制，允许经过身份认证的攻击者通过篡改JWT来提升权限。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Mandiant

预定

2025-08-19

披露

2026-08-18

管理

已接受

条目

VDB-391918

EPSS

0.00000

KEV

否

活动

非常低

来源

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-9210
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-9210
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-9210/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!