CVE-2025-57212

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Dec 4, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-572137.5Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a CVE-2025-572157.5Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list_Info.CVE-2025-572175.3Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the Password parameter in the function R7We CVE-2025-572185.3Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 was discovered to contain a stack overflow via the security_5g parameter in the function s CVE-2025-572195.3Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 allows attackers to escalate privi CVE-2025-57224.8A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as problematic. This vulnerability affe CVE-2025-572205.3An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 to escalate privileges to root via a craf CVE-2025-572277.8An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted ex CVE-2025-57234.8A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unkn CVE-2025-572317.5Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request CVE-2025-57244.8A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classified as problematic. Affected is an unkn CVE-2025-572406.1Cross site scripting (XSS) vulnerability in 17gz International Student service system 1.0 allows attackers to execute arbitrary code via the