What’s Vulnerable › Vulnerabilities

CVE-2025-2388: Keytop 路内停车收费系统 API getParks improper authentication

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-17 · updated 2026-06-17
• Weakness: CWE-287

Description

A vulnerability was found in Keytop 路内停车收费系统 2.7.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /saas/commonApi/park/getParks of the component API. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

References

• https://github.com/K-mxredo/MXdocument/wiki
• https://vuldb.com/?ctiid.299887
• https://vuldb.com/?id.299887
• https://vuldb.com/?submit.516710

Get alerted when CVE-2025-2388 or the next vulnerability affects your stack