CNNVD-202512-967 Information

CNNVD ID

CNNVD-202512-967

CVE-2025-42616

  • CNNVD Published: 2025-12-08

Description (Chinese)

Vulnerability-Lookup是Vulnerability-Lookup开源的一个管理披露漏洞的平台。 Vulnerability-Lookup 2.18.0之前版本存在安全漏洞,该漏洞源于HTTP GET请求可修改应用状态,可能导致跨站请求伪造攻击。

Description (English)

Vulnerability-Lookup is a platform for the Vulnerability-Lookup Open Source to manage disclosure gaps. Prior to Vulnerability-Lookup 2.18.0, there was a security loophole, which stemmed from a request by HTTP GET to modify its application and could lead to a cross-site request for a false attack.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Vulnerability-Lookup

Published

2025-12-08

Last Modified

2026-02-24

References

https://vulnerability.circl.lu/vuln/gcve-1-2025-0034

Patch

https://vulnerability.circl.lu/vuln/gcve-1-2025-0034

Share on: