CVE-2025-1813CWE-352CWE-862

zj1983 zz cross-site request forgery

Medium · published March 2, 2025

CVSS v4.0

5.3

EPSS

Percentile

28.1

In the wild

Unconfirmed

What it is

A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record

Technical detail

CVSS v4.0: 5.3 · MEDIUM
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00356 · 28.1th percentile
Weaknesses: CWE-352 · Cross-Site Request Forgery (CSRF); CWE-862 · Missing Authorization
Published: 2025-03-02T10:00Z

EPSS history

Timeline

02 MAR 10:00Z
zj1983 zz cross-site request forgery
cvelistv5