CVE-2025-3979

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 352
CWE ID 862

Summary

CVE-2025-3979 is a newly disclosed vulnerability affecting the Password Change Handler component in dazhouda lecms version 3.0.3. The issue, classified as problematic, resides in the /index.php?my-password-ajax-1 file and results in cross-site request forgery (CSRF). An attacker can exploit this vulnerability remotely, potentially initiating unauthorized actions on affected systems. Public disclosure of the exploit increases the risk of attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share