CVE-2025-45611

CVE-2025-45611 affects Hope-Boot v1.0.0. The issue is improper access control in the /user/edit/ component that allows bypassing authentication via a crafted GET request. The CVSS v3.1 base score is 9.8 (CRITICAL) with Network attack vector, no privileges, no user interaction required, and impact...

CVE-2025-6551

The CVE-2025-6551 entry affects java-aodeng Hope-Boot 1.0.0, specifically the Login function in WebController.java. The vulnerability arises from improper handling of the errorMsg argument, enabling cross-site scripting (XSS). The issue is potentially exploitable remotely and, per sources, a publ...