CVE-2025-8226

🗓️ 27 Jul 2025 08:32:11Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 12 Views🌐 WEB

Vulnerability CVE-2025-8226 in yanyutao0402 ChanCMS allows information disclosure via accessKey manipulation.

Reporter	Title	Published	Views	Family All 7
CNNVD	ChanCMS 访问控制错误漏洞	27 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-8226 yanyutao0402 ChanCMS find information disclosure	27 Jul 202508:32	–	cvelist
EUVD	EUVD-2025-22817	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8226	27 Jul 202509:15	–	nvd
Positive Technologies	PT-2025-31000 · Yanyutao0402 · Chancms	27 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8226	29 Jul 202510:34	–	redhatcve
Vulnrichment	CVE-2025-8226 yanyutao0402 ChanCMS find information disclosure	27 Jul 202508:32	–	vulnrichment

NVD

Vulners

Node

chancms chancmsRange<3.1.3

[
  {
    "vendor": "yanyutao0402",
    "product": "ChanCMS",
    "versions": [
      {
        "version": "3.1.0",
        "status": "affected"
      },
      {
        "version": "3.1.1",
        "status": "affected"
      },
      {
        "version": "3.1.2",
        "status": "affected"
      },
      {
        "version": "3.1.3",
        "status": "unaffected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
gitee	www.gitee.com/yanyutao0402/ChanCMS/issues/ICLP9V
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
accessKey	query param	/sysApp/find	Information disclosure via manipulation of accessKey/secretKey in /sysApp/find	CWE-284, CWE-200
secretKey	query param	/sysApp/find	Information disclosure via manipulation of accessKey/secretKey in /sysApp/find	CWE-284, CWE-200

29 Apr 2026 01:00Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.3 - 9.8

CVSS 24

CVSS 45.3

CVSS 34.3

EPSS0.00275

SSVC

chancms vulnerability information disclosure remote attack upgrade recommendation