CyberSecBulletin

Xujiangfei vulnerabilities

We track 3 vulnerabilities in Xujiangfei products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2025.

3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score

Latest Xujiangfei vulnerabilities

  • 7.5 High severity

    admintwo: Incorrect Privilege Assignment

    CVE-2025-3256Xujiangfei

    A vulnerability was found in xujiangfei admintwo 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/updateSet. The manipulation of the argument email leads to improper access controls. The attack may be l

  • 7.5 High severity

    admintwo: Incorrect Privilege Assignment

    CVE-2025-3255Xujiangfei

    A vulnerability was found in xujiangfei admintwo 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/home. The manipulation of the argument ID leads to improper access controls. The attack can

  • 9.8 Critical severity

    admintwo: Server-Side Request Forgery

    CVE-2025-3254Xujiangfei

    A vulnerability was found in xujiangfei admintwo 1.0. It has been classified as critical. Affected is an unknown function of the file /resource/add. The manipulation of the argument description leads to server-side request forgery. It is possible to launch the