CVE-2025-11272 | SeriaWei ZKEACMS up to 4.3 POST Request UrlRedirectionController.cs Delete improper authorization

A vulnerability was found in SeriaWei ZKEACMS up to 4.3. It has been rated as critical. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2025-11272. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.