CVE-2025-1177

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Feb 11, 2025
Updated: Feb 20, 2025
CWE ID 502
CWE ID 20

Summary

CVE-2025-1177 is a critical vulnerability affecting dayrui XunRuiCMS version 4.6.3. The issue lies in the import_add function of the file dayrui/Fcms/Control/Admin/Linkage.php. An attacker can exploit this vulnerability through remote manipulation, leading to deserialization. The exploit for this vulnerability has been made public and its use may pose a significant risk to affected systems.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share