What’s Vulnerable › Vulnerabilities

CVE-2025-3567: veal98 小牛肉 Echo 开源社区系统 Ticket LoginTicketInterceptor.java preHandle improper authorization

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-14 · updated 2026-06-17
• Weakness: CWE-266

Description

A vulnerability, which was classified as problematic, was found in veal98 小牛肉 Echo 开源社区系统 4.2. Affected is the function preHandle of the file src/main/java/com/greate/community/controller/interceptor/LoginTicketInterceptor.java of the component Ticket Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

• veal98 小牛肉 Echo 开源社区系统: 4.2

References

• https://github.com/caigo8/CVE-md/blob/main/Echo/%E4%B8%8D%E5%AE%89%E5%85%A8%E7%9A%84%E6%9D%83%E9%99%90%E6%A0%A1%E9%AA%8C.md
• https://vuldb.com/?ctiid.304608
• https://vuldb.com/?id.304608
• https://vuldb.com/?submit.549537

Get alerted when CVE-2025-3567 or the next vulnerability affects your stack