CVE-2025-8838 — HIGH (7.3) — White Hats Nepal

Vulnerability Description

A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Interface. The manipulation of the argument uri leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The code maintainer responded to the issue that "[he] tried it, and using this link automatically redirects to the login page."

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Winterchens	My-Site	2025-06-11

Related Weaknesses (CWE)

CWE-287

References

https://github.com/WinterChenS/my-site/issues/97ExploitIssue Tracking
https://github.com/WinterChenS/my-site/issues/97#issuecomment-2986947791Issue Tracking
https://github.com/WinterChenS/my-site/issues/97#issuecomment-2987091571Issue Tracking
https://vuldb.com/?ctiid.319372Permissions RequiredVDB Entry
https://vuldb.com/?id.319372Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.622421Third Party AdvisoryVDB Entry
https://github.com/WinterChenS/my-site/issues/97ExploitIssue Tracking
https://github.com/WinterChenS/my-site/issues/97#issuecomment-2986947791Issue Tracking
https://github.com/WinterChenS/my-site/issues/97#issuecomment-2987091571Issue Tracking
https://vuldb.com/?submit.622421Third Party AdvisoryVDB Entry

FAQ

What is CVE-2025-8838?

CVE-2025-8838 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability has been found in WinterChenS my-site up to 1f7525f15934d9d6a278de967f6ec9f1757738d8. This vulnerability affects the function preHandle of the file /admin/ of the component Backend Int...

How severe is CVE-2025-8838?

CVE-2025-8838 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-8838?

Check the references section above for vendor advisories and patch information. Affected products include: Winterchens My-Site.