CVE-2025-6702: linlinjava litemall post improper authorization
A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6702?
CVE-2025-6702 is classified as a problematic vulnerability due to its potential for improper authorization.
How do I fix CVE-2025-6702?
To fix CVE-2025-6702, ensure that your application has implemented proper access controls and validates user privileges before executing functions.
What software is affected by CVE-2025-6702?
CVE-2025-6702 affects linlinjava litemall version 1.8.0.
Is CVE-2025-6702 exploitable remotely?
Yes, CVE-2025-6702 can be exploited remotely through manipulation of the adminComment argument.
What is the primary issue caused by CVE-2025-6702?
The primary issue caused by CVE-2025-6702 is improper authorization, allowing unauthorized users to perform actions they should not be able to.