Vulnerability · Published May 26, 2025 · Assigned by VulDB

CVE-2025-5163yangshare 技术杨工 warehouseManager 仓库管理系统 access control

Medium 5.3

In plain English

A medium-severity improper access control in warehouseManager 仓库管理系统 from yangshare 技术杨工. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.6%top 52.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affects an unknown part. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
yangshare 技术杨工	warehouseManager 仓库管理系统	1.0

Weakness: CWE-284, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

VDB-310251 | yangshare 技术杨工 warehouseManager 仓库管理系统 access control vdb-entry
VDB-310251 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
Submit #576315 | gitee warehouseManager 1.0 Authentication Bypass Issues third-party-advisory
https://github.com/sumingwjl/cve/issues/1 exploit, issue-tracking