CVE-2025-9310: yeqifu carRental Druid login.html hard-coded credentials
A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an unknown functionality of the file /carRentalwar/druid/login.html of the component Druid. Executing manipulation can lead to hard-coded credentials. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9310?
CVE-2025-9310 has been assessed with a high severity rating due to its potential to expose hard-coded credentials.
How do I fix CVE-2025-9310?
To remediate CVE-2025-9310, update to a patched version of yeqifu carRental that addresses this vulnerability.
What component is affected by CVE-2025-9310?
CVE-2025-9310 affects the Druid component associated with the /carRental_war/druid/login.html file.
What risks does CVE-2025-9310 pose?
CVE-2025-9310 poses risks such as unauthorized access to the application due to hard-coded credentials being exploitable.
Is any version of yeqifu carRental safe from CVE-2025-9310?
Yes, versions of yeqifu carRental after 3fabb7eae93d209426638863980301d6f99866b3 are not affected by CVE-2025-9310.