← Vulnerability feed

Vulnerability record · CVE-2025-10675 · published 18 September 2025

CVE-2025-10675: Fuyang lipengjun platform improper authorization vulnerability

FFuyang Lipengjun · Platform

A security flaw has been discovered in fuyang_lipengjun platform 1.0. This impacts the function AttributeController of the file /attribute/queryAll. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.

2.1 CVSS 4.0 Low EPSS 0.35% · top 73.4% CWE-266 · CWE-266CWE-285 · Improper authorization
2.1CVSS 4.0 base score, v2 4.0
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

A security flaw has been discovered in fuyang_lipengjun platform 1.0. This impacts the function AttributeController of the file /attribute/queryAll. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://vuldb.com/?ctiid.324796 Permissions RequiredVDB Entry
https://vuldb.com/?id.324796 Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.653343 Third Party AdvisoryVDB Entry
https://www.cnblogs.com/aibot/p/19063430 ExploitThird Party Advisory
https://vuldb.com/?submit.653343 Third Party AdvisoryVDB Entry
https://www.cnblogs.com/aibot/p/19063430 ExploitThird Party Advisory

Track CVE-2025-10675 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2025-57212Fuyang lipengjun platform improper access control vulnerabilityIncorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted requ…EPSS 0.29%7.5CVE-2025-57213Fuyang lipengjun platform improper access control vulnerabilityIncorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a crafted …EPSS 0.29%7.5CVE-2025-57210Fuyang lipengjun platform improper access control vulnerabilityIncorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unspecified v…EPSS 0.29%2.1CVE-2025-10822Fuyang lipengjun platform improper authorization vulnerabilityA vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/que…EPSS 0.35%2.1CVE-2025-10821Fuyang lipengjun platform improper authorization vulnerabilityA flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/query…EPSS 0.35%2.1CVE-2025-10820Fuyang lipengjun platform improper authorization vulnerabilityA vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /topic/queryAll. The manipulation…EPSS 0.37%2.1CVE-2025-10819Fuyang lipengjun platform improper authorization vulnerabilityA security vulnerability has been detected in fuyang_lipengjun platform 1.0. This issue affects the function UserCouponController of the file /userco…EPSS 0.37%2.1CVE-2025-10676Fuyang lipengjun platform improper authorization vulnerabilityA weakness has been identified in fuyang_lipengjun platform 1.0. Affected is the function BrandController of the file /brand/queryAll. Executing mani…EPSS 0.35%

Source: NIST National Vulnerability Database (record CVE-2025-10675), CISA KEV, FIRST EPSS (scores of 2026-10-05). This page is refreshed as NVD updates the record.