References https://nvd.nist.gov/vuln/detail/CVE-2025-8765 https://vuldb.com/vuln/319267 https://access.redhat.com/security/cve/cve-2025-8765 https://cve.imfht.com/detail/CVE-2025-8765 https://vuldb.com/zh/?id.319267 https://vuldb.com/es/vuln/319267 https://github.com/advisories/GHSA-gmvj-9qmg-j5gw https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2025-8765
Related VulnerabilitiesPoCmaven-settings-xml-exposure: Apache Maven settings.xml Credentials - ExposurePoCCVE-2026-0717: LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings Disclosure9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-63732)PoCclaude-settings-exposure: Claude Code Project Settings ExposurePoCCVE-2026-44825: Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-46339)PoCCVE-2025-12841: WordPress Bookit < 2.5.1 - Unauthenticated Stripe Settings UpdateApache Solr 默认口令漏洞(CVE-2026-44825)BECN DATAGERRY /rest/users/1/settings/ 权限绕过漏洞(CVE-2024-46627)PoCCVE-2024-48259: Cloudlog - SQL InjectionPoCCVE-2024-32825: Simply Static - Information Disclosure蓝凌OA /WS/Basic/Basic.asmx WS_getAllInfos 信息泄露漏洞PoCCVE-2023-6825: WordPress File Manager <= 7.2.1 - Directory Traversal