Lucene search
+L

7 matches found

OSV
OSV
•added 2025/07/12 7:02 p.m.•2 views

CVE-2025-7487 JoeyBling SpringBoot_MyBatisPlus upload SysFileController unrestricted upload

A vulnerability, which was classified as critical, was found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26. This affects the function SysFileController of the file /file/upload. The manipulation of the argument portraitFile leads to unrestricted upload. It is...

5.3CVSS5.4AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2025/07/12 12:00 a.m.•16 views

SpringBoot_MyBatisPlus 代码问题漏洞

SpringBootMyBatisPlus is a SpringBoot integration with MyBatisPlus by Siwei Zhou, an individual developer. A code issue vulnerability exists in SpringBootMyBatisPlus, which stems from a wrong operation of the parameter portraitFile in file/file/upload leading to arbitrary file uploads...

6.5CVSS6.7AI score0.00273EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/12 12:00 a.m.•2 views

CVE-2025-7487: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in JoeyBling SpringBootMyBatisPlus up to a6a825513bd688f717dbae3a196bc9c9622fea26. This affects the function SysFileController of the file /file/upload. The manipulation of the argument portraitFile leads to unrestricted upload. It is...

6.5CVSS5.2AI score0.00273EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/24 6:00 p.m.•14 views

CVE-2025-0702 JoeyBling bootplus SysFileController.java unrestricted upload

A vulnerability classified as critical was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This vulnerability affects unknown code of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument portraitFile leads to unrestricted...

5.3CVSS5.4AI score
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•20 views

PT-2025-4011 · Unknown · Joeybling Bootplus

Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A critical vulnerability was found in JoeyBling bootplus, allowing for unrestricted file upload. The issue is related to the manipulation of the portraitFile...

6.5CVSS6.6AI score0.00672EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•3 views

CVE-2025-0702: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This vulnerability affects unknown code of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument portraitFile leads to unrestricted...

8.8CVSS5.2AI score0.00672EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•16 views

bootplus 代码问题漏洞

bootplus is a permission management framework by JoeyBling Personal Developer. A code issue vulnerability exists in bootplus, which stems from the parameter PortraitFile in the file src/main/java/io/github/controller/SysFileController.java that can lead to unrestricted uploads...

8.8CVSS6.6AI score0.00672EPSS
SaveExploits0References6
Rows per page
Query Builder