CVE-2025-27893

🗓️ 11 Mar 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 53 Views🌐 WEB

Authenticated users can manipulate immutable fields in Archer Platform, compromising data integrity.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-27893	11 Mar 202511:46	–	circl
CNNVD	Archer Platform 安全漏洞	11 Mar 202500:00	–	cnnvd
Cvelist	CVE-2025-27893	11 Mar 202500:00	–	cvelist
EUVD	EUVD-2025-7817	3 Oct 202520:07	–	euvd
NVD	CVE-2025-27893	11 Mar 202509:15	–	nvd
OSV	CVE-2025-27893	11 Mar 202509:15	–	osv
Positive Technologies	PT-2025-10720 · Rsa · Archer Platform	11 Mar 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-27893	15 Mar 202504:28	–	redhatcve
Vulnrichment	CVE-2025-27893	11 Mar 202500:00	–	vulnrichment

NVD

Vulners

Node

archerirm archerRange6.0.0.0–6.14.00202.10024

[
  {
    "defaultStatus": "unknown",
    "product": "Archer",
    "vendor": "Archer",
    "versions": [
      {
        "lessThanOrEqual": "6.14.00202.10024",
        "status": "affected",
        "version": "6",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
archerirm	www.archerirm.com/
github	www.github.com/NastyCrow/CVE-2025-27893

Parameter	Position	Path	Description	CWE
id	query param	GenericContent/Record.aspx	Authenticated user can manipulate immutable fields (e.g., creation date) via a Copy request to GenericContent/Record.aspx?id=, but changes revert in View mode and are not saved to the database (no real impact).	CWE-472

17 Jun 2026 09:04Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.11.8 - 4.3

EPSS0.00366

SSVC

CWE-472