CVE-2025-10674 – fuyang_lipengjun platform queryAll AttributeCategoryController improper authorization

CVE ID : CVE-2025-10674

Published : Sept. 18, 2025, 4:15 p.m. | 45 minutes ago

Description : A vulnerability was identified in fuyang_lipengjun platform 1.0. This affects the function AttributeCategoryController of the file /attributecategory/queryAll. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit is publicly available and might be used.

Severity: 5.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…