Lucene search
K

7 matches found

CNNVD
CNNVD
added 2026/02/22 12:0 a.m.4 views

forest 代码注入漏洞

Forest is a modern knowledge community backend project developed by RYMCU. It is implemented using SpringBoot, Shiro, MyBatis, JWT, and Redis. Versions of Forest 0.0.5 and earlier have a code injection vulnerability. This vulnerability stems from incorrect operations on the XssUtils.replaceHtmlCo...

5.4CVSS5.7AI score0.00036EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/22 12:0 a.m.4 views

forest 代码注入漏洞

Forest is a modern knowledge community backend project developed by RYMCU. It is implemented using SpringBoot, Shiro, MyBatis, JWT, and Redis. Versions of Forest 0.0.5 and earlier have a code injection vulnerability. This vulnerability stems from incorrect operations in the updateUserInfo functio...

5.4CVSS5.7AI score0.00042EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/11/10 12:0 a.m.3 views

forest 安全漏洞

forest is a modern knowledge community backend project of RYMCU open source , using SpringBoot + Shiro + MyBatis + JWT + Redis implementation . There is a security vulnerability in forest, which originates from the lack of authorization for the functions getAll/addDic/getAllDic/deleteDic in the...

9.8CVSS7.5AI score0.0007EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/11/10 12:0 a.m.2 views

forest 安全漏洞

forest is a modern knowledge community backend project open-sourced by RYMCU, implemented using SpringBoot + Shiro + MyBatis + JWT + Redis. A security vulnerability exists in forest, which originates from the lack of authorization of the GlobalResult function in the file...

6.5CVSS4.8AI score0.00038EPSS
Exploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in ant-forest-hla676-project (npm)

The package ant-forest-hla676-project was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-27101 Malicious code in nautilus-forest-wpw230-project (npm)

The package nautilus-forest-wpw230-project was found to contain malicious code...

7.2AI score
Exploits0
CNNVD
CNNVD
added 2024/01/13 12:0 a.m.1 views

forest Security breach

forest is a modern knowledge community backend project implemented using SpringBoot + Shiro + MyBatis + JWT + Redis. A security vulnerability exists in rymcu forest v.0.02 that allows remote attackers to obtain sensitive information by manipulating the HTTP URL in the...

7.5CVSS6.5AI score0.00163EPSS
Exploits1References2
Rows per page
Query Builder