CVE-2025-6552

CVE-2025-6552 affects java-aodeng Hope-Boot 1.0.0. The vulnerable component is the doLogin function in WebController.java (/src/main/java/com/hope/controller/WebController.java) where manipulation of the redirect_url parameter enables an open redirect. Remote exploitation is possible and the vuln...

CVE-2025-6551 java-aodeng Hope-Boot WebController.java login cross site scripting

A vulnerability was found in java-aodeng Hope-Boot 1.0.0 and classified as problematic. This issue affects the function Login of the file /src/main/java/com/hope/controller/WebController.java. The manipulation of the argument errorMsg leads to cross site scripting. The attack may be initiated...