CVE-2025-0705

CVE-2025-0705 affects JoeyBling bootplus: the qrCode function in src/main/java/io/github/controller/QrCodeController.java allows an open redirect via manipulation of the text argument. Descriptions across sources confirm remote attack feasibility with public exploitation details; version details ...

CVE-2025-0705 JoeyBling bootplus QrCodeController.java qrCode redirect

A vulnerability has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this vulnerability is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument text lead...

CVE-2025-0704

Summary of CVE-2025-0704 (JoeyBling bootplus) A vulnerability in the qrCode function of QrCodeController.java (bootplus) allows manipulation of the w/h arguments, leading to resource consumption and potential remote exploitation. The issue affects JoeyBling bootplus up to commit 247d5f6c209be1a5c...