CVE-2025-45611

The hope-boot project (version 1.0.0 ) contains a critical security vulnerability due to incorrect access control in the /user/edit/ component. This flaw allows an attacker to bypass authentication by sending a crafted GET request . While no specific patch version is provided, it is recommended t...

CVE-2025-6551

The CVE-2025-6551 entry affects java-aodeng Hope-Boot 1.0.0, specifically the Login function in WebController.java. The vulnerability arises from improper handling of the errorMsg argument, enabling cross-site scripting (XSS). The issue is potentially exploitable remotely and, per sources, a publ...