CNNVD-202507-3567 Information

CNNVD ID

CNNVD-202507-3567

CVE-2025-54765

  • CNNVD Published: 2025-07-29

Description (Chinese)

XORUX XorMon-NG是捷克XORUX公司的一个基础设施性能监控平台。 XORUX XorMon-NG存在安全漏洞,该漏洞源于API端点访问控制不当,可能导致权限提升。

Description (English)

XORUX XorMon-NG is an infrastructure performance monitoring platform for the Czech company XORUX. XORUX XorMon-NG has a security loophole, which stems from inadequate access controls at the API endpoint, which may lead to increased access.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

XORUX

Published

2025-07-29

Last Modified

2026-02-24

References

https://korelogic.com/Resources/Advisories/KL-001-2025-013.txt https://xormon.com/note190.php

Patch

https://xormon.com/download.php

Share on: