PT-2025-11551 · Unknown · 猫宁I Morning

Enenen · Published 2025-03-17 · Updated 2026-01-15 · CVE-2025-2420

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e

Description A vulnerability was found in 猫宁i Morning, affecting an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continuous delivery. Therefore, version details for affected and updated releases are not available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2025-2420

Affected Products

猫宁I Morning

References · 12

• 🔥 https://gitee.com/morning-pro/Morning/issues/IBRVMX · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2420 · Security Note
• https://vuldb.com/?ctiid.299917 · Note
• https://vuldb.com/?submit.517009 · Note
• https://t.me/cvedetector/20540 · Telegram Post
• https://t.me/cvenotify/115135 · Telegram Post
• https://twitter.com/CVEnew/status/1901768058861175077 · Twitter Post
• https://twitter.com/pedri77/status/2011710638234456130 · Twitter Post
• https://twitter.com/attritionorg/status/1901693587324309696 · Twitter Post
• https://t.me/cvetracker/19346 · Telegram Post
• https://vuldb.com/?id.299917 · Note
• https://twitter.com/WolfgangSesin/status/1901659473476805021 · Twitter Post