CVE-2025-2637
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Mar 23, 2025
Updated: Apr 2, 2025
CWE ID 862
Summary
CVE-2025-2637 is a newly disclosed vulnerability affecting JIZHICMS versions up to 1.7.0. This issue lies within the Account Profile Page component and specifically the /user/userinfo.html file. By manipulating the jifen argument, an attacker can bypass authorization checks, gaining unauthorized access. This vulnerability poses a remote threat, meaning an attack can be launched from outside the network. The exploit for this weakness has been made public, increasing the risk for potential exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Q-Free Maxtime
Affected Vendors
- Nozomi Networks