CVE-2025-3567: veal98 小牛肉 Echo 开源社区系统 Ticket LoginTicketInterceptor.java preHandle improper authorization
First published: Mon Apr 14 2025(Updated: )
A vulnerability, which was classified as problematic, was found in veal98 小牛肉 Echo 开源社区系统 4.2. Affected is the function preHandle of the file src/main/java/com/greate/community/controller/interceptor/LoginTicketInterceptor.java of the component Ticket Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| veal98 Echo 开源社区系统 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-3567?
CVE-2025-3567 is classified as a problematic vulnerability in the veal98 Echo 开源社区系统.
What components are affected by CVE-2025-3567?
CVE-2025-3567 affects the preHandle function in the LoginTicketInterceptor.java file of the Ticket Handler component.
How do I fix CVE-2025-3567?
To fix CVE-2025-3567, ensure to update to the patched version of veal98 Echo 开源社区系统.
What type of manipulation does CVE-2025-3567 allow?
CVE-2025-3567 allows manipulation that can compromise the functionality of the login ticket handling process.
Who is the vendor of the affected software for CVE-2025-3567?
The vendor for the affected software related to CVE-2025-3567 is veal98.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/severity
- agent/last-modified-date
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/veal98
- canonical/veal98 echo 开源社区系统