References https://nvd.nist.gov/vuln/detail/CVE-2025-3040 https://vuldb.com/vuln/302102 https://access.redhat.com/security/cve/cve-2025-3040 https://www.cve.org/CVERecord?id=CVE-2025-3040 https://github.com/advisories/GHSA-q953-x475-mh65 https://cve.imfht.com/detail/CVE-2025-3040?lang=zh https://darkeye.org/vuln/cve/CVE-2025-3040 https://www.sentinelone.com/vulnerability-database/cve-2025-3040/
Related VulnerabilitiesPoCclaude-settings-exposure: Claude Code Project Settings Exposure关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告FOGProject /fog/management/export.php 信息泄露漏洞(CVE-2025-58443)PoCCVE-2026-47717: FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data DisclosureTRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞(CVE-2025-27223)FUXA /api/project 信息泄露漏洞(CVE-2026-47717)孚盟云 CRM /PageStructure/Normal/TfrmProject.aspx 文件读取漏洞PoCopenproject-default-login: OpenProject - Default Admin CredentialsFUXA /api/project 权限绕过漏洞(CVE-2025-69971)OpenProject存在默认口令PoCCVE-2024-13114: WP Projects Portfolio <= 3.0 - Cross-Site ScriptingPoCFOG Project /fog/service/getversion.php 文件读取漏洞(CVE-2026-24138)