CVE-2025-3964
withstars Books-Management-System Article del cross-site request forgery
- State
- Published
- Severity
- 5.3 Medium
- Published
- Apr 27, 2025
- Updated
- Apr 28, 2025
- Reserved
- Apr 26, 2025
Description
A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | VulDB |
| 2.0 | 5.0 Medium | AV:N/AC:L/Au:N/C:N/I:P/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Books-Management-Systemwithstars |
|
References
- VDB-306300 | withstars Books-Management-System Article del cross-site request forgeryvdb-entry
- VDB-306300 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #557239 | https://github.com/withstars/Blog-System Blog-System 1.0 Cross-Site Request Forgerythird-party-advisory
- https://github.com/caigo8/CVE-md/blob/main/Blog-System/CSRF.mdexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.