CVE-2025-25908

概要

参考情報

• xujeff/tianti · Exploit

tianti のその他の脆弱性

• CVE-2025-9795中 5.4A vulnerability has been found in xujeff tianti 天梯 up to 2.3. The impacted element is the function ajaxUploadFile of the file src/main/java/…
• CVE-2025-8807高 8.8A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been declared as critical. This vulnerability affects unknown code of the fi…
• CVE-2025-27910高 8.0tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows…
• CVE-2025-25907高 8.8tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attac…
• CVE-2018-19110中 6.5The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-mo…