VulnerabilityAnalyzed
CVE-2025-3691
A vulnerability was found in mirweiye Seven Bears Library CMS 2023.
MEDIUM 5.1EPSS 0.60%
Does this matter?
Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was found in mirweiye Seven Bears Library CMS 2023. It has been classified as problematic. Affected is an unknown function of the component Add Link Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
- CVSS 4.0
- 5.1 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.60% probability · 47th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-918
- Affected
- mirweiye/seven bears library cms
- Source
- cna@vuldb.com
References
- https://github.com/KKDT12138/CVE/blob/main/cve2.pdfExploit, Third Party Advisory
- https://vuldb.com/?ctiid.304980Permissions Required, VDB Entry
- https://vuldb.com/?id.304980Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.553507Third Party Advisory, VDB Entry
- https://github.com/KKDT12138/CVE/blob/main/cve2.pdfExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.