Medium severity5.3NVD Advisory· Published Aug 21, 2025· Updated Jun 17, 2026

CVE-2025-9310

Description

A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vulnerability is an unknown functionality of the file /carRental_war/druid/login.html of the component Druid. Executing manipulation can lead to hard-coded credentials. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Carrental Project/Carrental
cpe:2.3:a:carrental_project:carrental:1.0:*:*:*:*:*:*:*
Yeqifu/Carrentalllm-fuzzy2 versions
up to 3fabb7eae93d209426638863980301d6f99866b3+ 1 more
- (no CPE)range: up to 3fabb7eae93d209426638863980301d6f99866b3
- (no CPE)range: 3fabb7eae93d209426638863980301d6f99866b3

Patches

Vulnerability mechanics

References

github.com/caigo8/CVE-md/blob/main/carRentalV1.0/druid%E6%9C%AA%E6%8E%88%E6%9D%83.mdnvdExploitThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000