EUVD-2025-21230

Malicious code in bioql PyPI...

EUVD-2025-21233

Malicious code in bioql PyPI...

CVE-2025-7488 JoeyBling SpringBoot_MyBatisPlus download path traversal

A vulnerability has been found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical. This vulnerability affects the function Download of the file /file/download. The manipulation of the argument Name leads to path traversal. The attack can b...

CVE-2025-7488 JoeyBling SpringBoot_MyBatisPlus download path traversal

A vulnerability has been found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26 and classified as critical. This vulnerability affects the function Download of the file /file/download. The manipulation of the argument Name leads to path traversal. The attack can b...

CVE-2025-7488

The CVE-2025-7488 entry concerns JoeyBling SpringBoot_MyBatisPlus (up to a6a825513bd688f717dbae3a196bc9c9622fea26). The vulnerability resides in the Download function handling the /file/download endpoint, where manipulating the Name argument enables path traversal. It is described as remotely exp...

CVE-2025-7487

The CVE-2025-7487 entry concerns JoeyBling SpringBoot_MyBatisPlus, specifically the SysFileController in /file/upload. The vulnerability arises from improper handling of the portraitFile argument, enabling unrestricted file uploads and remote exploitation. Public disclosures exist, but the exact ...

CVE-2025-7487 JoeyBling SpringBoot_MyBatisPlus upload SysFileController unrestricted upload

A vulnerability, which was classified as critical, was found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26. This affects the function SysFileController of the file /file/upload. The manipulation of the argument portraitFile leads to unrestricted upload. It is...

SpringBoot_MyBatisPlus code issues and vulnerabilities

SpringBootMyBatisPlus is a SpringBoot integration with MyBatisPlus by Siwei Zhou, an individual developer. A code issue vulnerability exists in SpringBootMyBatisPlus, which stems from a wrong operation of the parameter portraitFile in file/file/upload leading to arbitrary file uploads...

PT-2025-29343 · Unknown · Joeybling Springboot Mybatisplus

Name of the Vulnerable Software and Affected Versions: JoeyBling SpringBoot MyBatisPlus versions prior to a6a825513bd688f717dbae3a196bc9c9622fea26 Description: A critical vulnerability exists in the SysFileController function located at /file/upload within JoeyBling SpringBoot MyBatisPlus...

com.baomidou:mybatisplus-spring-boot-starter (1.0.2) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.0.9)

com.baomidou:mybatis-plus MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatisplus-spring-boot-starter 1.0.2 Source cves: CVE-2023-25330 Source advisory:...

com.baomidou:mybatisplus-spring-boot-starter (1.0.3) potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.1-beta)

com.baomidou:mybatis-plus MAVEN version 2.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - com.baomidou:mybatisplus-spring-boot-starter 1.0.3 Source cves: CVE-2023-25330 Source advisory:...

cn.bestwu.simpleframework:simpleframework-data-mybatis (>=0.1.31, <=0.1.33), com.baomidou:mybatis-plus-boot-starter (2.3.3) +2 more potentially affected by CVE-2023-25330 via com.baomidou:mybatis-plus (2.3.3)

com.baomidou:mybatis-plus MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.baomidou:mybatis-plus and may be impacted: - cn.bestwu.simpleframework:simpleframework-data-mybatis =0.1.31, =1.1.18-release, =1.1.0-release,...