CVE-2025-2639: JIZHICMS Article release.html improper authorization
A vulnerability has been found in JIZHICMS up to 1.7.0 and classified as problematic. This vulnerability affects unknown code of the file /user/release.html of the component Article Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2639?
CVE-2025-2639 is classified as problematic due to its impact on authorization mechanisms within JIZHICMS.
How do I fix CVE-2025-2639?
To fix CVE-2025-2639, update JIZHICMS to a version later than 1.7.0 which addresses this vulnerability.
What systems are affected by CVE-2025-2639?
CVE-2025-2639 affects JIZHICMS versions up to and including 1.7.0.
What kind of attack can exploit CVE-2025-2639?
CVE-2025-2639 can be exploited through remote attacks that manipulate improper authorization.
What component of JIZHICMS is vulnerable in CVE-2025-2639?
The vulnerable component in CVE-2025-2639 is the Article Handler found in the /user/release.html file.