CVE-2025-15152

CVE-2025-15152 affects the h-moses moga-mall product service, specifically the addProduct function in src/main/java/com/ms/product/controller/PmsProductController.java. The root cause is manipulation of the objectName argument, enabling unrestricted (unbounded) uploads. The issue is exploitable r...

moga-mall 代码问题漏洞

moga-mall is a microservices architecture based e-commerce platform by h-moses individual developers. A code issue vulnerability exists in moga-mall 392d631a5ef15962a9bddeeb9f1269b9085473fa and earlier versions, which originates from the file...