CVE-2025-2653

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-2653
A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://vuldb.com/?ctiid.300668 VDB Entry Permissions Required
https://vuldb.com/?id.300668 VDB Entry Third Party Advisory
https://vuldb.com/?submit.519927 VDB Entry Third Party Advisory
https://www.yuque.com/yuqueyonghuveuwuh/aveeid/nvg6rd3qw1ww83yo?singleDoc Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:qianfox:foxcms:1.25:*:*:*:*:*:*:*
History

16 Jul 2025, 15:04

Type Values Removed Values Added
References () https://vuldb.com/?ctiid.300668 - () https://vuldb.com/?ctiid.300668 - VDB Entry, Permissions Required
References () https://vuldb.com/?id.300668 - () https://vuldb.com/?id.300668 - VDB Entry, Third Party Advisory
References () https://vuldb.com/?submit.519927 - () https://vuldb.com/?submit.519927 - VDB Entry, Third Party Advisory
References () https://www.yuque.com/yuqueyonghuveuwuh/aveeid/nvg6rd3qw1ww83yo?singleDoc - () https://www.yuque.com/yuqueyonghuveuwuh/aveeid/nvg6rd3qw1ww83yo?singleDoc - Broken Link
Summary
  • (es) Se encontró una vulnerabilidad en FoxCMS 1.25 y se clasificó como problemática. Este problema afecta a una funcionalidad desconocida. La manipulación da lugar a una autorización indebida. El ataque podría ejecutarse remotamente. Se ha hecho público el exploit y puede que sea utilizado.
CPE cpe:2.3:a:qianfox:foxcms:1.25:*:*:*:*:*:*:*
First Time Qianfox foxcms
Qianfox

23 Mar 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-23 16:15

Updated : 2025-07-16 15:04

NVD link : CVE-2025-2653

Mitre link : CVE-2025-2653

CVE.ORG link : CVE-2025-2653

JSON object : View

Products Affected

qianfox

  • foxcms
CWE
CWE-266

Incorrect Privilege Assignment

CWE-285

Improper Authorization