CVE-2025-2638: JIZHICMS Article release.html improper authorization
Published Mar 23, 2025
·Updated
A vulnerability, which was classified as problematic, was found in JIZHICMS up to 1.7.0. This affects an unknown part of the file /user/release.html of the component Article Handler. The manipulation of the argument ishot with the input 1 leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Jizhicms JIZHICMS<=1.7.0
Jizhicms JIZHICMS<=1.7
Event History
Mar 23, 2025
CVE Published
via MITRE·01:31 AM
Data Sourced
via MITRE·01:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-2638?
CVE-2025-2638 is classified as a problematic vulnerability.
2
How do I fix CVE-2025-2638?
To fix CVE-2025-2638, upgrade JIZHICMS to a version later than 1.7.0.
3
What component is affected by CVE-2025-2638?
CVE-2025-2638 affects the Article Handler component in JIZHICMS.
4
What part of JIZHICMS does CVE-2025-2638 manipulate?
CVE-2025-2638 involves improper authorization in the file /user/release.html.
5
What input triggers the vulnerability in CVE-2025-2638?
The input '1' for the argument 'ishot' triggers the vulnerability in CVE-2025-2638.