PT-2025-16212
CVE-2025-3561
·
Published
2025-04-14
·
Updated
2025-10-10
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
ghostxbh uzy-ssm-mall version 1.0.0
Description:
A vulnerability was found in the software, classified as problematic. It leads to cross-site request forgery and can be launched remotely. The exploit has been disclosed to the public.
Recommendations:
For ghostxbh uzy-ssm-mall version 1.0.0, as a temporary workaround, consider implementing measures to prevent cross-site request forgery attacks until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾