PT-2025-7531 · Ofcms · Ofcms

Caigo · Published 2025-02-22 · Updated 2025-06-04 · CVE-2025-1557

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OFCMS version 1.1.3

Description A vulnerability was found in OFCMS, which can be exploited to perform cross-site request forgery. The issue is related to an unknown function and can be launched remotely. The exploit has been disclosed to the public and may be used.

Recommendations For OFCMS version 1.1.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

BDU:2026-00279

CVE-2025-1557

Affected Products

Ofcms

References · 11

• 🔥 https://yuque.com/u123456789-6sobi/cdgcbq/kq7117ogyycutxo2?singleDoc#%20%E3%80%8ACSRF%20Vulnerability%20in%20OfCms%20%2F%20OfCms%E5%AD%98%E5%9C%A8CSRF%E6%BC%8F%E6%B4%9E%E3%80%8B · Exploit
• https://osv.dev/vulnerability/CVE-2025-1557 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00279 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1557 · Security Note
• https://vuldb.com/?ctiid.296508 · Note
• https://t.me/cvenotify/112143 · Telegram Post
• https://t.me/cvenotify/124645 · Telegram Post
• https://twitter.com/CVEnew/status/1893288740035924218 · Twitter Post
• https://t.me/cvedetector/18716 · Telegram Post
• https://vuldb.com/?id.296508 · Note
• https://vuldb.com/?submit.500269 · Note