Skip to main content

EUVD-2025-19248

| CVE-2025-6735 LOW
Incorrect Privilege Assignment (CWE-266)
2025-06-27 cna@vuldb.com GHSA-rq7x-cfmc-rq3w
Information Disclosure
2.1
CVSS 4.0 · NVD

Severity by source

NVD PRIMARY
2.1 LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

6
Severity Changed
Apr 29, 2026 - 01:11 NVD
MEDIUM LOW
CVSS changed
Apr 29, 2026 - 01:11 NVD
6.3 (MEDIUM) 2.1 (LOW)
EUVD ID Assigned
Mar 16, 2026 - 00:16 euvd
EUVD-2025-19248
Analysis Generated
Mar 16, 2026 - 00:16 vuln.today
PoC Detected
Jul 11, 2025 - 14:22 vuln.today
Public exploit code
CVE Published
Jun 27, 2025 - 00:15 nvd
MEDIUM 6.3

DescriptionCVE.org

A vulnerability classified as critical has been found in juzaweb CMS 3.4.2. Affected is an unknown function of the file /admin-cp/imports of the component Import Page. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

A security vulnerability in A vulnerability classified as critical (CVSS 6.3). Risk factors: public PoC available.

Technical ContextAI

Vulnerability type not specified by vendor. Affects A vulnerability classified as critical.

RemediationAI

Monitor vendor channels for patch availability.

Share

EUVD-2025-19248 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy