CVE-2025-1595 PoC — TSINGSEE EasyCVR 访问控制错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1595.yaml

Associated Vulnerability

Title:TSINGSEE EasyCVR 访问控制错误漏洞 (CVE-2025-1595)
Description:TSINGSEE EasyCVR是中国旭帆（TSINGSEE）公司的一个视频管理平台。 TSINGSEE EasyCVR 2.7.0及之前版本存在访问控制错误漏洞，该漏洞源于存在信息泄露问题。

Description

A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

File Snapshot


 id: CVE-2025-1595

info:
  name: EasyCVR <=2.1.2 - Information Disclosure
  author: ritikchaddha
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!