CVE-2025-3981

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Apr 27, 2025
Updated: May 12, 2025
CWE ID 285
CWE ID 862
CWE ID 266

Summary

CVE-2025-3981 is a newly disclosed vulnerability affecting the Internet Doctor Workstation System 1.0 from wowjoy 浙江湖州华卓信息科技有限公司. This issue is classified as problematic and allows for improper authorization due to a processing flaw in the handling of the file /v1/prescription/details/. An attacker can exploit this remotely, making it a significant security risk. The exploit for this vulnerability has been made public, increasing the urgency for affected organizations to apply patches or workarounds. Regrettably, efforts to contact the vendor for a response have been unsuccessful.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share