CWE
285 266
EPSS
0.036%
Advisory Published
Updated

CVE-2025-3967: itwanger paicoding Article post improper authorization

First published: Sun Apr 27 2025(Updated: )

A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Credit: cna@vuldb.com

Affected SoftwareAffected VersionHow to fix
itwanger paicoding

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2025-3967?

    CVE-2025-3967 has been classified as a critical vulnerability.

  • How does CVE-2025-3967 affect the application?

    CVE-2025-3967 affects the Article Handler component, leading to improper authorization through manipulation of the articleId argument.

  • What versions of itwanger paicoding are affected by CVE-2025-3967?

    CVE-2025-3967 affects itwanger paicoding version 1.0.3.

  • What steps should be taken to mitigate CVE-2025-3967?

    To mitigate CVE-2025-3967, ensure proper authorization checks are implemented for the articleId parameter.

  • Can I identify if my system is vulnerable to CVE-2025-3967?

    You can identify if your system is vulnerable to CVE-2025-3967 by checking for the version of itwanger paicoding in use and reviewing the authorization mechanisms for the affected component.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203