CVE-2025-70059

Mô tả

Tham khảo

• gist.github.com/zcxlighthouse/e6090e95643c1b1cd4ecc2088c4e77ef · Third Party Advisory
• github.com/YMFE · Product
• YMFE/yapi · Product

Lỗ hổng khác của yapi

• CVE-2025-70060TRUNG BÌNH 5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0.
• CVE-2025-70058CAO 7.4An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certif…
• CVE-2021-36686TRUNG BÌNH 5.4Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
• CVE-2021-27884TRUNG BÌNH 5.1Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. This occurs bec…
• CVE-2018-17574TRUNG BÌNH 5.4An issue was discovered in YMFE YApi 1.3.23. There is stored XSS in the name field of a project.