VULNERABILITY INTELLIGENCE

CVE-2025-5132

CVSS score4.3 MEDIUM

EPSS probability0.34%

CISA KEVNot currently listed

Published2025-05-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/account/logout. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness classification

cna@vuldb.com: CWE-352
nvd@nist.gov: CWE-352

Primary references

cna@vuldb.com — Exploit, Issue Tracking, Third Party Advisory
cna@vuldb.com — Permissions Required
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Third Party Advisory