Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Springbootmovie Project records in CISA KEVNo Springbootmovie Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 34
In SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in arbitrary file upload vulnerability
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01067 · Published 2022-05-03 · No fix listed CWE-434
Priority LOW 25
In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters, resulting in stored XSS.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00487 · Published 2022-05-03 · No fix listed CWE-79
