Vulnerabilities

TI-2025-01940 CVE-2025-2211 · GHSA-497p-42fj-pvx6

aitangbao springboot-manager add cross site scripting

MEDIUM 55

A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00502 Published 2025-03-11 No fix listed CWE-79

TI-2025-01939 CVE-2025-2210 · GHSA-289c-6rvp-9j2r

aitangbao springboot-manager add cross site scripting

MEDIUM 55

A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00502 Published 2025-03-11 No fix listed CWE-79

TI-2025-01938 CVE-2025-2209 · GHSA-6f3w-cqwf-2g5r

aitangbao springboot-manager add cross site scripting

MEDIUM 55

A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00502 Published 2025-03-11 No fix listed CWE-79

TI-2025-01937 CVE-2025-2208 · GHSA-564r-jgrm-jr8x

aitangbao springboot-manager Filename upload cross site scripting

MEDIUM 55

A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00529 Published 2025-03-11 No fix listed CWE-79

TI-2025-01936 CVE-2025-2207 · GHSA-38p6-9wh4-q95c

aitangbao springboot-manager dept cross site scripting

MEDIUM 55

A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00529 Published 2025-03-11 No fix listed CWE-79

TI-2025-01935 CVE-2025-2206 · GHSA-h2p3-j299-jf37

aitangbao springboot-manager permission cross site scripting

MEDIUM 55

A vulnerability classified as problematic has been found in aitangbao springboot-manager 3.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00529 Published 2025-03-11 No fix listed CWE-79

TI-2024-15992 CVE-2024-24062 · GHSA-76q5-rvjr-8vhj

springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role.

LOW 25

springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/role.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00424 Published 2024-02-01 No fix listed CWE-79

TI-2024-15991 CVE-2024-24061 · GHSA-vx2f-5c28-4wg3

springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add.

MEDIUM 58

springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sysContent/add.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00394 Published 2024-02-01 No fix listed CWE-79

TI-2024-15990 CVE-2024-24060 · GHSA-qmjp-x43g-wwmh

springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user.

LOW 25

springboot-manager v1.6 is vulnerable to Cross Site Scripting (XSS) via /sys/user.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00403 Published 2024-02-01 No fix listed CWE-79

TI-2024-15989 CVE-2024-24059 · GHSA-4vg6-rrvh-fpmr

springboot-manager v1.6 is vulnerable to Arbitrary File Upload.

MEDIUM 60

springboot-manager v1.6 is vulnerable to Arbitrary File Upload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0042 Published 2024-02-01 No fix listed CWE-79

Vulnerabilities

Filters