szluyu99 gin-vue-blog PATCH Request manager.go ବିସ୍ତାରିତ ଅଧିକାର

Dogoggorri kan akka ଜଟିଳ jedhamuun ramadame szluyu99 gin-vue-blog ଯେପର୍ଯ୍ୟନ୍ତ 61dd11ccd296e8642a318ada3ef7b3f7776d2410 keessatti argameera. Miidhaan irra gahe is hojii hin beekamne faayilii gin-blog-server/internal/manager.go keessa kutaa PATCH Request Handler keessa. Dhugumatti jijjiirraa gara ବିସ୍ତାରିତ ଅଧିକାର geessa. Waliigalteewwan CWE fayyadamuun rakkoo ibsuun gara CWE-285 si geessa. Beekumsi kun yeroo 06/15/2025 ifoomsifameera. Odeeffannoon kun buufachuuf github.com irratti dhiyaateera. Dogoggorri kun maqaa CVE-2025-6099 jedhuun tajaajilama. Weerara fageenya irraa jalqabuun ni danda'ama. Odeeffannoon teeknikaa ni argama. Akka dabalataan, meeshaa balaa kana fayyadamuuf argama. Qorannoo miidhaa (exploit) beeksifamee jira, namoonni itti fayyadamuu danda'u. Yeroo ammaa, gatii exploit might be approx. USD $0-$5k beekamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ jedhamee murtaa’eera. Exploit kana github.com irraa buufachuu ni dandeessa. Waggaa 0-day ta'ee, gatiin isaa daldala dhoksaa keessatti $0-$5k jedhamee tilmaamame. Odeeffannoon kun tajaajila rolling release fayyadama, kanaafis tamsaasa itti fufinsa qabu ni kenna. Kanaaf, odeeffannoon gosa version jijjiirame yookaan kan miidhamte hin jiru. Once again VulDB remains the best source for vulnerability data.

4 ଆଡାପ୍ଟେସନ୍ · 89 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
06/15/2025 09:07 AM		ଅଦ୍ୟତନ 1/3
06/16/2025 03:20 AM		ଅଦ୍ୟତନ 2/3
06/16/2025 07:13 AM		ଅଦ୍ୟତନ 3/3
06/16/2025 11:35 AM
software_vendorszluyu99szluyu99szluyu99szluyu99
software_namegin-vue-bloggin-vue-bloggin-vue-bloggin-vue-blog
software_version<=61dd11ccd296e8642a318ada3ef7b3f7776d2410<=61dd11ccd296e8642a318ada3ef7b3f7776d2410<=61dd11ccd296e8642a318ada3ef7b3f7776d2410<=61dd11ccd296e8642a318ada3ef7b3f7776d2410
software_rollingrelease1111
software_componentPATCH Request HandlerPATCH Request HandlerPATCH Request HandlerPATCH Request Handler
software_filegin-blog-server/internal/manager.gogin-blog-server/internal/manager.gogin-blog-server/internal/manager.gogin-blog-server/internal/manager.go
vulnerability_cweCWE-285 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-285 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-285 (ବିସ୍ତାରିତ ଅଧିକାର)CWE-285 (ବିସ୍ତାରିତ ଅଧିକାର)
vulnerability_risk2222
cvss3_vuldb_avNNNN
cvss3_vuldb_acLLLL
cvss3_vuldb_prNNNN
cvss3_vuldb_uiNNNN
cvss3_vuldb_sUUUU
cvss3_vuldb_cNNNN
cvss3_vuldb_iLLLL
cvss3_vuldb_aNNNN
cvss3_vuldb_ePPPP
cvss3_vuldb_rcRRRR
advisory_urlhttps://github.com/szluyu99/gin-vue-blog/issues/28https://github.com/szluyu99/gin-vue-blog/issues/28https://github.com/szluyu99/gin-vue-blog/issues/28https://github.com/szluyu99/gin-vue-blog/issues/28
exploit_availability1111
exploit_publicity1111
exploit_urlhttps://github.com/szluyu99/gin-vue-blog/issues/28https://github.com/szluyu99/gin-vue-blog/issues/28https://github.com/szluyu99/gin-vue-blog/issues/28https://github.com/szluyu99/gin-vue-blog/issues/28
source_cveCVE-2025-6099CVE-2025-6099CVE-2025-6099CVE-2025-6099
cna_responsibleVulDBVulDBVulDBVulDB
cvss2_vuldb_avNNNN
cvss2_vuldb_acLLLL
cvss2_vuldb_auNNNN
cvss2_vuldb_ciNNNN
cvss2_vuldb_iiPPPP
cvss2_vuldb_aiNNNN
cvss2_vuldb_ePOCPOCPOCPOC
cvss2_vuldb_rcURURURUR
cvss4_vuldb_avNNNN
cvss4_vuldb_acLLLL
cvss4_vuldb_prNNNN
cvss4_vuldb_uiNNNN
cvss4_vuldb_vcNNNN
cvss4_vuldb_viLLLL
cvss4_vuldb_vaNNNN
cvss4_vuldb_ePPPP
cvss2_vuldb_rlNDNDNDND
cvss3_vuldb_rlXXXX
cvss4_vuldb_atNNNN
cvss4_vuldb_scNNNN
cvss4_vuldb_siNNNN
cvss4_vuldb_saNNNN
cvss2_vuldb_basescore5.05.05.05.0
cvss2_vuldb_tempscore4.34.34.34.3
cvss3_vuldb_basescore5.35.35.35.3
cvss3_vuldb_tempscore4.84.84.84.8
cvss3_meta_basescore5.35.35.35.3
cvss3_meta_tempscore4.85.05.05.0
cvss4_vuldb_bscore6.96.96.96.9
cvss4_vuldb_btscore5.55.55.55.5
advisory_date1749938400 (06/15/2025)1749938400 (06/15/2025)1749938400 (06/15/2025)1749938400 (06/15/2025)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared as critical. This vulnerability affects unknown code of the file gin-blog-server/internal/manager.go of the component PATCH Request Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared as critical. This vulnerability affects unknown code of the file gin-blog-server/internal/manager.go of the component PATCH Request Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared as critical. This vulnerability affects unknown code of the file gin-blog-server/internal/manager.go of the component PATCH Request Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
cvss4_cna_avNNN
cvss4_cna_acLLL
cvss4_cna_atNNN
cvss4_cna_prNNN
cvss4_cna_uiNNN
cvss4_cna_vcNNN
cvss4_cna_viLLL
cvss4_cna_vaNNN
cvss4_cna_scNNN
cvss4_cna_siNNN
cvss4_cna_saNNN
cvss4_cna_bscore6.96.96.9
cvss3_cna_avNNN
cvss3_cna_acLLL
cvss3_cna_prNNN
cvss3_cna_uiNNN
cvss3_cna_sUUU
cvss3_cna_cNNN
cvss3_cna_iLLL
cvss3_cna_aNNN
cvss3_cna_basescore5.35.35.3
cvss2_cna_avNNN
cvss2_cna_acLLL
cvss2_cna_auNNN
cvss2_cna_ciNNN
cvss2_cna_iiPPP
cvss2_cna_aiNNN
cvss2_cna_basescore555
euvd_idEUVD-2025-18356EUVD-2025-18356
cve_nvd_summaryesSe encontró una vulnerabilidad en gin-vue-blog szluyu99 hasta 61dd11ccd296e8642a318ada3ef7b3f7776d2410. Se ha declarado crítica. Esta vulnerabilidad afecta al código desconocido del archivo gin-blog-server/internal/manager.go del componente PATCH Request Handler. La manipulación provoca una autorización indebida. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado. Este producto utiliza una versión continua para garantizar una distribución continua. Por lo tanto, no se dispone de detalles de las versiones afectadas ni de las versiones actualizadas.

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Might our Artificial Intelligence support you?

Check our Alexa App!