CVE-2025-3964
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 352
CWE ID 862
Summary
CVE-2025-3964 is a newly identified vulnerability affecting the withstars Books-Management-System version 1.0. The issue lies within the Article Handler component, specifically the /api/article/del file. This vulnerability permits an attacker to execute cross-site request forgery, enabling them to manipulate user actions remotely. The exploit has been publicly disclosed, increasing the risk of potential attacks. However, it should be noted that this vulnerability only impacts unsupported versions of the Books-Management-System.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.