Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-10674 EUVD-2025-29860GHSA-hmc4-gcw9-2542

fuyang_lipengjun platform queryAll AttributeCategoryController improper authorization

Published Sep 18, 2025 · Updated Sep 19, 2025 · Assigned by VulDB

Description

A vulnerability was identified in fuyang_lipengjun platform 1.0. This affects the function AttributeCategoryController of the file /attributecategory/queryAll. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be used.

Affected products

VendorProductAffectedFixed
fuyang_lipengjun platform 1.0 —

References