CVE-2025-5888

A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://github.com/Aiyakami/CVE-1/issues/5 Exploit Issue Tracking Third Party Advisory
https://github.com/luokuang1/CVE/issues/1 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.311659 Permissions Required VDB Entry
https://vuldb.com/?id.311659 Third Party Advisory VDB Entry
https://vuldb.com/?submit.582062 Exploit VDB Entry Third Party Advisory
https://vuldb.com/?submit.582920 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:jsnjfz:webstack-guns:1.0:*:*:*:*:*:*:*

History

03 Dec 2025, 21:15

Type Values Removed Values Added
CPE cpe:2.3:a:jsnjfz:webstack-guns:1.0:*:*:*:*:*:*:*
First Time Jsnjfz webstack-guns
Jsnjfz
References () https://github.com/Aiyakami/CVE-1/issues/5 - () https://github.com/Aiyakami/CVE-1/issues/5 - Exploit, Issue Tracking, Third Party Advisory
References () https://github.com/luokuang1/CVE/issues/1 - () https://github.com/luokuang1/CVE/issues/1 - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.311659 - () https://vuldb.com/?ctiid.311659 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.311659 - () https://vuldb.com/?id.311659 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.582062 - () https://vuldb.com/?submit.582062 - Exploit, VDB Entry, Third Party Advisory
References () https://vuldb.com/?submit.582920 - () https://vuldb.com/?submit.582920 - Third Party Advisory, VDB Entry

Information

Published : 2025-06-09 18:15

Updated : 2025-12-03 21:15


NVD link : CVE-2025-5888

Mitre link : CVE-2025-5888

CVE.ORG link : CVE-2025-5888


JSON object : View

Products Affected

jsnjfz

  • webstack-guns
CWE
CWE-352

Cross-Site Request Forgery (CSRF)

CWE-862

Missing Authorization