CVE-2025-0703

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-0703
A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://github.com/JoeyBling/bootplus/issues/25 Not Applicable
https://github.com/JoeyBling/bootplus/issues/25#issue-2786928618 Not Applicable
https://vuldb.com/?ctiid.293231 Permissions Required VDB Entry
https://vuldb.com/?id.293231 Third Party Advisory VDB Entry
https://vuldb.com/?submit.480842 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:joeybling:bootplus:*:*:*:*:*:*:*:*
History

10 Oct 2025, 19:04

Type Values Removed Values Added
References () https://github.com/JoeyBling/bootplus/issues/25 - () https://github.com/JoeyBling/bootplus/issues/25 - Not Applicable
References () https://github.com/JoeyBling/bootplus/issues/25#issue-2786928618 - () https://github.com/JoeyBling/bootplus/issues/25#issue-2786928618 - Not Applicable
References () https://vuldb.com/?ctiid.293231 - () https://vuldb.com/?ctiid.293231 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.293231 - () https://vuldb.com/?id.293231 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.480842 - () https://vuldb.com/?submit.480842 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:joeybling:bootplus:*:*:*:*:*:*:*:*
First Time Joeybling
Joeybling bootplus
Summary
  • (es) Se ha encontrado una vulnerabilidad, que se ha clasificado como problemática, en JoeyBling bootplus hasta 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. Este problema afecta a algunos procesos desconocidos del archivo src/main/java/io/github/controller/SysFileController.java. La manipulación del nombre del argumento conduce a Path Traversal. El ataque puede iniciarse de forma remota. El exploit se ha divulgado al público y puede utilizarse. Este producto no utiliza control de versiones. Por este motivo, no está disponible la información sobre las versiones afectadas y no afectadas.

24 Jan 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-24 19:15

Updated : 2025-10-10 19:04

NVD link : CVE-2025-0703

Mitre link : CVE-2025-0703

CVE.ORG link : CVE-2025-0703

JSON object : View

Products Affected

joeybling

  • bootplus
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')