PT-2025-12539 · Foxcms · Foxcms

Beize · Published 2025-03-23 · Updated 2025-03-23 · CVE-2025-2653

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions FoxCMS version 1.25

Description A vulnerability was found in the software, classified as problematic, affecting some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely.

Recommendations For FoxCMS version 1.25, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2025-2653

Affected Products

Foxcms

References · 10

• 🔥 https://yuque.com/yuqueyonghuveuwuh/aveeid/nvg6rd3qw1ww83yo?singleDoc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2653 · Security Note
• https://osv.dev/vulnerability/CVE-2025-2653 · Vendor Advisory
• https://t.me/cvenotify/115833 · Telegram Post
• https://vuldb.com/?id.300668 · Note
• https://vuldb.com/?submit.519927 · Note
• https://t.me/cvetracker/19710 · Telegram Post
• https://t.me/cvedetector/20912 · Telegram Post
• https://vuldb.com/?ctiid.300668 · Note
• https://twitter.com/CVEnew/status/1903836668467249417 · Twitter Post