CVE-2025-10676 MEDIUM

CVE-2025-10676: fuyang_lipengjun platform queryAll BrandController improper authorization

Vendor Fuyang_Lipengjun
Product platform
Weakness CWE-285
Published September 18, 2025
Last update September 19, 2025

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in fuyang_lipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.

Key dates

02Disclosure timeline

September 18, 2025 CVE published
September 19, 2025 Record updated