user-xiangpeng

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

user-xiangpeng records in CISA KEV

No user-xiangpeng vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2025-28815 CVE-2025-45615 · GHSA-j63q-6jg5-5r67

HIGH 82

Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00455 Published 2025-05-05 No fix listed CWE-284

TI-2025-01849 CVE-2025-2112 · GHSA-pc44-78w5-436j

MEDIUM 57

A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00569 Published 2025-03-08 No fix listed CWE-74