CVE-2025-7552

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in Dromara Northstar up to 7.3.5. It has been rated as critical. Affected by this issue is the function preHandle of the file northstar-main/src/main/java/org/dromara/northstar/web/interceptor/AuthorizationInterceptor.java of the component Path Handler. The manipulation of the argument Request leads to improper access controls. The attack may be launched remotely. Upgrading to version 7.3.6 is able to address this issue. The patch is identified as 8d521bbf531de59b09b8629a9cbf667870ad2541. It is recommended to upgrade the affected component.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-266CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-75537.2A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component SystCVE-2025-75542.4A vulnerability classified as problematic was found in Sapido RB-1802 1.0.32. This vulnerability affects unknown code of the file urlfilter.CVE-2025-75558.8A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown procesCVE-2025-75568.8A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the fileCVE-2025-75578.8A vulnerability has been found in code-projects Voting System 1.0 and classified as critical. Affected by this vulnerability is an unknown fCVE-2025-75588.8A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionalitCVE-2025-75598.8A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. This affects an unknown part oCVE-2025-75608.8A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. This vulnerability affects unknoCVE-2025-75618.8A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. This issue affects some unknown proCVE-2025-75628.8A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of theCVE-2025-75638.8A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknowCVE-2025-75647.8A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functi
CVE-2025-7552: Medium severity, CVSS 6.3 | Vulnix