Lucene search
+L

6 matches found

CVE
CVE
•added 2025/12/01 4:32 a.m.•33 views

CVE-2025-13807

The CVE-2025-13807 entry concerns the orionsec orion-ops API, specifically the MachineKeyController in orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineKeyController.java. The vulnerability is described as improper authorization in the MachineKeyController, allowing remote exploitati...

5.3CVSS5AI score0.00364EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/01 4:32 a.m.•10 views

CVE-2025-13807 orionsec orion-ops API MachineKeyController.java MachineKeyController improper authorization

A vulnerability was detected in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected is the function MachineKeyController of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineKeyController.java of the component API. The manipulation result...

5.3CVSS5.1AI score0.00364EPSS
SaveExploits1References5
OSV
OSV
•added 2025/12/01 4:32 a.m.•15 views

CVE-2025-13807 orionsec orion-ops API MachineKeyController.java MachineKeyController improper authorization

A vulnerability was detected in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected is the function MachineKeyController of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineKeyController.java of the component API. The manipulation result...

5.3CVSS5.4AI score
SaveExploits0References7
EUVD
EUVD
•added 2025/12/01 4:32 a.m.•24 views

EUVD-2025-199954

A vulnerability was detected in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected is the function MachineKeyController of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineKeyController.java of the component API. The manipulation result...

5.3CVSS4.7AI score0.00364EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/01 12:00 a.m.•18 views

orion-ops 安全漏洞

orion-ops is a one-stop automated O&M and automated deployment platform by the individual developer, Jiahang Li. A security vulnerability exists in orion-ops, which stems from an incorrect operation of the file MachineKeyController.java, which could lead to improper authorization...

5.3CVSS4.8AI score0.00364EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/01 12:00 a.m.•5 views

CVE-2025-13807: Improper Authorization

A vulnerability was detected in orionsec orion-ops up to 5925824997a3109651bbde07460958a7be249ed1. Affected is the function MachineKeyController of the file orion-ops-api/orion-ops-web/src/main/java/cn/orionsec/ops/controller/MachineKeyController.java of the component API. The manipulation result...

5.3CVSS5.2AI score0.00364EPSS
SaveExploits1References7
Rows per page
Query Builder