Lucene search
+L

38 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:31 p.m.•19 views

CVE-2022-44371

hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution RCE...

9.8CVSS7.6AI score0.01441EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/07 12:24 a.m.•30 views

CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

9.8CVSS7.1AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/05 8:15 p.m.•20 views

CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

9.8CVSS0.00531EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/05 12:00 a.m.•16 views

PT-2025-19779

Name of the Vulnerable Software and Affected Versions hope-boot version 1.0.0 Description The issue is related to incorrect access control in the "/user/edit/" component, which allows attackers to bypass authentication by sending a crafted GET request. Recommendations For hope-boot version 1.0.0,...

9.8CVSS6.7AI score0.00531EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2025/05/05 12:00 a.m.•27 views

CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

0.00531EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/05/05 12:00 a.m.•8 views

CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

7.1AI score0.00531EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/05 12:00 a.m.•4 views

CVE-2025-45611: Improper Access Control

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

9.8CVSS5.8AI score0.00531EPSS
SaveExploits1References1
Mend
Mend
•added 2025/05/05 12:00 a.m.•4 views

CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

9.8CVSS0.00531EPSS
SaveExploits1References3
OSV
OSV
•added 2025/05/05 12:00 a.m.•10 views

CVE-2025-45611

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request...

9.8CVSS7AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/05 12:00 a.m.•13 views

Hope-Boot 安全漏洞

Hope-Boot is a modern scaffolding project by the individual developer java-aodeng. A security vulnerability exists in Hope-Boot v1.0.0, which stems from improper access control in the component /user/edit/ and could lead to bypassing authentication...

9.8CVSS6.6AI score0.00531EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/05 12:00 a.m.•84 views

CVE-2025-45611

The hope-boot project (version 1.0.0 ) contains a critical security vulnerability due to incorrect access control in the /user/edit/ component. This flaw allows an attacker to bypass authentication by sending a crafted GET request . While no specific patch version is provided, it is recommended t...

9.8CVSS6.8AI score0.00531EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/12/07 12:00 a.m.•10 views

Hope-Boot 代码问题漏洞

Hope-Boot is a modern scaffolding project by the individual developer java-aodeng. A security vulnerability exists in Hope-Boot version 1.0.0, which stems from an attacker's ability to achieve remote code execution via deserialization...

9.8CVSS9.1AI score0.01441EPSS
SaveExploits1References2
OSV
OSV
•added 2022/12/07 12:00 a.m.•20 views

CVE-2022-44371

hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution RCE...

9.8CVSS7.6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/12/07 12:00 a.m.•8 views

CVE-2022-44371

hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution RCE...

9.8AI score0.01441EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/12/07 12:00 a.m.•11 views

PT-2022-27199 · Hope-Boot · Hope-Boot

Name of the Vulnerable Software and Affected Versions: hope-boot version 1.0.0 Description: The issue is related to a deserialization vulnerability that can cause Remote Code Execution RCE. Recommendations: For hope-boot version 1.0.0, consider disabling deserialization functionality as a tempora...

9.8CVSS9.5AI score0.01441EPSS
SaveExploits1References4
CVE
CVE
•added 2022/12/07 12:00 a.m.•66 views

CVE-2022-44371

CVE-2022-44371 affects hope-boot 1.0.0 and is described as a deserialization vulnerability that can lead to Remote Code Execution (RCE). The issue arises from unsafe deserialization in the component, with CVSS v3.1 base metrics: Network, Low attack complexity, No privileges required, User interac...

9.8CVSS9.7AI score0.01441EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/12/07 12:00 a.m.•1 views

CVE-2022-44371

hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution RCE...

9.8CVSS0.01441EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•3 views

CVE-2022-44371: Deserialization of Untrusted Data

hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution RCE...

9.8CVSS5.9AI score0.01441EPSS
SaveExploits1References3
Rows per page
Query Builder