medium6.3
CVE-2025-8529
A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0.
Impact
A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0. Affected by this vulnerability is the function getCollectLogoUrl of the file app/src/main/java/com/favorites/web/CollectController.java. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions |
|---|---|
| Cloudfavorites Favorites-Web | before 1.3.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.