CVE-2025-3966
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 200
CWE ID 284
Summary
CVE-2025-3966 is a recently disclosed vulnerability affecting the itwanger paicoding 1.0.3 component. This issue involves a problematic functionality within the Browsing History Handler, specifically the /user/home?userId=1&homeSelectType=read file. Successful exploitation of this vulnerability results in information disclosure. Notably, this attack can be executed remotely, increasing its potential impact. The exploit has been made public, raising concerns for potential widespread misuse.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.