CVE-2025-10821
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Risk Assessment
Risk of unauthorized access to topic categories, potentially leading to data disclosure or modification. A remote attack could compromise system integrity.
Recommendation
Apply vendor patches or restrict access to /topiccategory/queryAll. Implement proper authorization controls for the TopicCategoryController function.
Other vulnerabilities in fuyang_lipengjun platform
See all- CVE-2025-10822Medium
A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed remotely. The exploit has been disclosed to the public and may be used.
- CVE-2025-10820Medium
A vulnerability was detected in fuyang_lipengjun platform 1.0. It impacts the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used.
- CVE-2025-10819Medium
A vulnerability was detected in the fuyang_lipengjun platform 1.0 in the UserCouponController function of /usercoupon/queryAll. Manipulation leads to improper authorization, and the attack can be performed remotely. The exploit has been publicly disclosed and may be used.
Original NVD description (English source)
A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS