CVE-2025-10675

2.1 lowEPSS 0.4%

Low (2.1) in fuyang lipengjun platform. EPSS 0.4% chance of exploitation in the next 30 days.

A security flaw has been discovered in fuyang_lipengjun platform 1.0. This impacts the function AttributeController of the file /attribute/queryAll. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-285
Published: 2025-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fuyang_lipengjun:platform

References

https://vuldb.com/?ctiid.324796
https://vuldb.com/?id.324796
https://vuldb.com/?submit.653343
https://www.cnblogs.com/aibot/p/19063430
https://vuldb.com/?submit.653343

Check your stack JSON