CVE-2025-10675: fuyang_lipengjun platform queryAll AttributeController improper authorization
A security flaw has been discovered in fuyanglipengjun platform 1.0. This impacts the function AttributeController of the file /attribute/queryAll. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10675?
CVE-2025-10675 is considered a critical severity vulnerability due to the potential for remote exploitation and improper authorization issues.
How do I fix CVE-2025-10675?
To fix CVE-2025-10675, update the fuyang_lipengjun platform to the latest version that addresses this vulnerability.
What impact does CVE-2025-10675 have on the fuyang_lipengjun platform?
CVE-2025-10675 allows attackers to exploit improper authorization in the AttributeController function, potentially leading to unauthorized access.
Is remote exploitation possible with CVE-2025-10675?
Yes, CVE-2025-10675 allows for remote exploitation due to improper authorization vulnerabilities.
What components are affected by CVE-2025-10675?
CVE-2025-10675 affects the AttributeController function in the /attribute/queryAll file of the fuyang_lipengjun platform.