Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/12/12 2:7 p.m.4 views

CVE-2025-14516

A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. The...

6.5CVSS6.5AI score0.00065EPSS
Exploits1References1
NVD
NVD
added 2025/12/11 2:16 p.m.5 views

CVE-2025-14516

A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. The...

8.8CVSS0.00065EPSS
Exploits1References5
OSV
OSV
added 2025/12/11 2:16 p.m.0 views

CVE-2025-14516

A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. The...

8.8CVSS5.4AI score0.00065EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.2 views

uCrop 代码问题漏洞

uCrop is an Android image cropping library open-sourced by Yalantis. A code issue vulnerability exists in uCrop version 2.2.11, which stems from a flaw in the function downloadFile in the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler, which could lead to server-sid...

8.8CVSS6.5AI score0.00065EPSS
Exploits1References5
Rows per page
Query Builder