Vulnerability · Published Apr 27, 2025 · Assigned by VulDB
CVE-2025-3960withstars Books-Management-System Background Interface allreaders.html authorization
High 7.3
In plain English
A high-severity missing authorization in Books-Management-System from withstars. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Official description
A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| withstars | Books-Management-System | 1.0 |
Weakness: CWE-862, CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- VDB-306296 | withstars Books-Management-System Background Interface allreaders.html authorization vdb-entry
- VDB-306296 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #557230 | https://github.com/withstars/Books-Management-System Books-Management-System 1.0 Missing Authorization third-party-advisory
- https://github.com/caigo8/CVE-md/blob/main/Books-Management-System/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE.md exploit