Vulnerability · Published Mar 31, 2025 · Assigned by VulDB

CVE-2025-3037yzk2356911358 StudentServlet-JSP cross-site request forgery

Medium 4.3

In plain English

A medium-severity cross-site request forgery in StudentServlet-JSP from yzk2356911358. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.3%top 77.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Affected products (as reported)

Vendor	Product	Versions
yzk2356911358	StudentServlet-JSP	cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5d4d7a0643f1dae908a4831206f2714b21820f991

Weakness: CWE-352, CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

References

VDB-302098 | yzk2356911358 StudentServlet-JSP cross-site request forgery vdb-entry
VDB-302098 | CTI Indicators (IOB, IOC) signature, permissions-required
Submit #524631 | yzk2356911358 StudentServlet-JSP null Cross-Site Request Forgery third-party-advisory
https://github.com/yzk2356911358/StudentServlet-JSP/issues/3 issue-tracking
https://github.com/yzk2356911358/StudentServlet-JSP/issues/3#issue-2937762896 exploit, issue-tracking