Vulnerability · Published Apr 27, 2025 · Assigned by VulDB
CVE-2025-3963withstars Books-Management-System Background Interface list authorization
High 7.3
In plain English
A high-severity missing authorization in Books-Management-System from withstars. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Official description
A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| withstars | Books-Management-System | 1.0 |
Weakness: CWE-862, CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- VDB-306299 | withstars Books-Management-System Background Interface list authorization vdb-entry
- VDB-306299 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #557237 | https://github.com/withstars/Blog-System Blog-System 1.0 Missing Authorization third-party-advisory
- https://github.com/caigo8/CVE-md/blob/main/Blog-System/%E6%9C%AA%E6%8E%88%E6%9D%83%E8%AE%BF%E9%97%AE.md exploit