CVE-2025-6099
Last modified
CVE-2025-6099 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared as critical. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared as critical. This vulnerability affects unknown code of the file gin-blog-server/internal/manager.go of the component PATCH Request Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-6099?
How severe is CVE-2025-6099?
How do I fix CVE-2025-6099?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-60967Cross Site Scripting (XSS) vulnerability in EndRun Technolog…7.3
- CVE-2025-60969Directory Traversal vulnerability in EndRun Technologies Son…5.7
- CVE-2025-6097A vulnerability was found in UTT 进取 750W up to 5.0 and class…9.8
- CVE-2025-6098A vulnerability was found in UTT 进取 750W up to 5.0. It has b…9.8
- CVE-2025-60982IDOR vulnerability in Educare ERP 1.0 (2025-04-22) allows un…5.4
- CVE-2025-60983Reflected Cross Site Scripting vulnerability in Rubikon Bank…5.4
- CVE-2025-60991A reflected cross-site scripted (XSS) vulnerability in Codaz…8.8
- CVE-2025-6100A vulnerability was found in realguoshuai open-video-cms 1.0…6.3
- CVE-2025-6101A vulnerability classified as critical has been found in let…5.5
- CVE-2025-61018An issue in the sqlo_place_dt_set component of openlink virt…7.5
- CVE-2025-61019An issue in the sqlo_key_part_best component of openlink vir…7.5
- CVE-2025-6102A vulnerability classified as critical was found in Wifi-sof…8.8
Are you affected by CVE-2025-6099?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST