CVE-2025-3413

CVE-2025-3413 affects opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024. Affected component: SysGeneratorController.java; the vulnerability stems from deserialization triggered by manipulating the Tables argument. Attacks can be launched remotely, and public exploit informati...

CVE-2025-3957

The CVE-2025-3957 entry concerns opplus springboot-admin 1.0, affecting the SysLogDao.xml file where the argument order can be manipulated to trigger a SQL injection. Multiple connected sources confirm remote-exploitation potential and public disclosure of the exploit. The Red Hat and PT Security...