CVE-2025-3382

creationtimestamp| type| source ---|---|--- 2025-04-07 20:46:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10790 2025-04-07 22:55:43+00:00| seen| https://t.me/cvedetector/22343...

CVE-2025-3382 joey-zhou xiaozhi-esp32-server-java update sql injection

A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerability affects the function update of the file /api/user/update. The manipulation of the argument state leads to sql injection. The attack c...