CVE-2025-25767

n/a / n/a PUBLISHED

Description (CNA)

A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://flowus.cn/share/a6170a19-032b-462d-8bf9-06ab139f78ba

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.