CNNVD-202507-3496 Information

Jul 28, 2025 cve

CNNVD ID

CNNVD-202507-3496

CVE-2025-8266

CNNVD Published: 2025-07-28

Description (Chinese)

ChanCMS是中国yanyutao0402个人开发者的一个内容管理系统。 ChanCMS 3.1.2及之前版本存在代码问题漏洞，该漏洞源于文件app/modules/cms/controller/collect.js中函数getArticle对参数targetUrl的操作导致反序列化。

Description (English)

ChanCMS is a content management system for the yanyutao0402 individual developers in China. ChanCMS 3.1.2 and previous versions have a code problem loophole, which stems from the operation of the getArticle function in documentapp/modules/cms/controller/collect.js to the parameter targetUrl, which results in a backsequencing.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

个人开发者

Published

2025-07-28

Last Modified

2026-02-24

References

https://vuldb.com/?submit.622170 https://vuldb.com/?id.317857 https://gitee.com/yanyutao0402/ChanCMS/issues/ICLP61 https://vuldb.com/?ctiid.317857 https://gitee.com/yanyutao0402/ChanCMS/releases/tag/V3.1.3 https://access.redhat.com/security/cve/cve-2025-8266 https://nvd.nist.gov/vuln/detail/CVE-2025-8266

Patch

https://gitee.com/yanyutao0402/ChanCMS/releases

Share on: