CVE-2025-3561

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-3561

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3561.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-3561

Published

2025-04-14T10:00:10Z

Modified

2026-10-28T02:31:12Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

ghostxbh uzy-ssm-mall cross-site request forgery

Details

A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-352",
        "CWE-862"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3561.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "1.0.0"
                        },
                        {
                            "last_affected":  "1.0.0"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandaloneSingleVersion"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/ghostxbh/uzy-ssm-mall

Affected ranges

Type

GIT

Repo

https://github.com/ghostxbh/uzy-ssm-mall

Events

Introduced

a93d48f7eb212e219679a046f4bd484c43420e24

Last Affected

a93d48f7eb212e219679a046f4bd484c43420e24

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:ghostxbh:uzy-ssm-mall:1.0.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.0.0"
                },
                {
                    "last_affected":  "1.0.0"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

1.*

1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-3561.json"