PT-2025-44755 · Unknown · Fushengqian Fuint

1098024193 · Published 2025-11-03 · Updated 2025-11-03 · CVE-2025-12623

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions fushengqian fuint (affected versions not specified)

Description A flaw exists in fushengqian fuint related to the Authentication Token Handler component, specifically within the file fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientSignController.java. This issue allows for authorization bypass through manipulation of some unknown functionality. The attack can be initiated remotely and is considered highly complex, though exploitation is known to be difficult. The exploit is publicly available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authorization

IDOR

Weakness Enumeration

CWE-285

CWE-639

Related Identifiers

CVE-2025-12623

Affected Products

Fushengqian Fuint

References · 7

• 🔥 https://github.com/fushengqian/fuint/issues/67 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-12623 · Security Note
• https://vuldb.com/?ctiid.330915 · Note
• https://t.me/cveNotify/141294 · Telegram Post
• https://t.me/CVEtracker/36407 · Telegram Post
• https://vuldb.com/?id.330915 · Note
• https://vuldb.com/?submit.678911 · Note