Aggregates CVE and security vulnerability intelligence across all tianti_project-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk cross-site scripting and vendor risk csrf and related problems; some flaws may lead to vendor impact session compromise, affecting vendor surface software deployment scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-9795 | A vulnerability has been found in xujeff tianti 天梯 up to 2.3. The impacted element is the function ajaxUploadFile of the file src/main/java/com/jeff/tianti/controller/UploadController.java. The manipulation of the argument upfile leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. | [email protected] | 2.1 | 0.05% | 2025-09-01 | 2026-04-29 |
| CVE-2025-8807 | A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been declared as critical. This vulnerability affects unknown code of the file /tianti-module-admin/user/ajax/save. The manipulation leads to missing authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | [email protected] | 2.1 | 0.06% | 2025-08-10 | 2026-04-29 |
| CVE-2025-27910 | tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request. | [email protected] | 8.0 | 0.05% | 2025-03-10 | 2025-05-21 |
| CVE-2025-25908 | A stored cross-site scripting (XSS) vulnerability in tianti v2.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the coverImageURL parameter at /article/ajax/save. | [email protected] | 5.4 | 0.05% | 2025-03-10 | 2025-06-23 |
| CVE-2025-25907 | tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or POST request. | [email protected] | 8.8 | 0.05% | 2025-03-10 | 2025-05-21 |
| CVE-2018-19110 | The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly because controller\usercontroller.java maps a /skin/list request to the function skinList, and lacks an authorization check. | [email protected] | 6.5 | 0.16% | 2018-11-08 | 2024-11-21 |
| CVE-2018-19109 | tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column. | [email protected] | 8.8 | 0.35% | 2018-11-08 | 2024-11-21 |
| CVE-2018-19091 | tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter. | [email protected] | 5.4 | 0.21% | 2018-11-07 | 2024-11-21 |
| CVE-2018-19090 | tianti 2.3 has stored XSS in the article management module via an article title. | [email protected] | 5.4 | 0.21% | 2018-11-07 | 2024-11-21 |
| CVE-2018-19089 | tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\user_list.jsp. | [email protected] | 5.4 | 0.21% | 2018-11-07 | 2024-11-21 |