PT-2025-17983 · Unknown · Withstars Books-Management-System

Caigo · Published 2025-04-27 · Updated 2025-05-12 · CVE-2025-3959

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions withstars Books-Management-System version 1.0

Description A vulnerability was found in the system, affecting an unknown functionality of the file /reader delete.html. This issue leads to cross-site request forgery and can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Recommendations For withstars Books-Management-System version 1.0, as a temporary workaround, consider restricting access to the /reader delete.html file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2025-3959

Affected Products

Withstars Books-Management-System

References · 12

• 🔥 https://github.com/caigo8/CVE-md/blob/main/Books-Management-System/CSRF.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-3959 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-3959 · Security Note
• https://t.me/cvedetector/23825 · Telegram Post
• https://vuldb.com/?id.306295 · Note
• https://t.me/cvenotify/120053 · Telegram Post
• https://t.me/cvetracker/22443 · Telegram Post
• https://vuldb.com/?submit.557147 · Note
• https://t.me/cvenotify/119939 · Telegram Post
• https://twitter.com/CVEnew/status/1916352307890880599 · Twitter Post
• https://vuldb.com/?ctiid.306295 · Note
• https://t.me/cvenotify/121793 · Telegram Post