Vulnerabilities

TI-2025-05951 CVE-2025-6552 · GHSA-4gv9-2936-gm5r

java-aodeng Hope-Boot Login WebController.java doLogin redirect

MEDIUM 57

A vulnerability was found in java-aodeng Hope-Boot 1.0.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00415 Published 2025-06-24 No fix listed CWE-601

TI-2025-05950 CVE-2025-6551 · GHSA-fh8x-6hpx-vcfq

MEDIUM 56

A vulnerability was found in java-aodeng Hope-Boot 1.0.0 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00463 Published 2025-06-24 No fix listed CWE-79

TI-2025-28811 CVE-2025-45611 · GHSA-r983-mg2r-69mq

MEDIUM 50

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00541 Published 2025-05-05 No fix listed CWE-284