TROYANOSYVIRUS
← Retour aux CVEs

CVE-2025-60830

MEDIUM
6.5

Description

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key.

Details CVE

Score CVSS v3.16.5
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie10/8/2025
Derniere modification10/10/2025
Sourcenvd
Observations honeypot0

Produits affectes

redragon-erp:redragon-erp

Faiblesses (CWE)

CWE-502

References

https://gist.github.com/ChangeYourWay/3b3d3dd5727272c435f1b1f6c17b7181(cve@mitre.org)
https://github.com/Yyjccc/document/blob/main/redragon-erp/redragon-erp.md(cve@mitre.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.