CVE-2025-0705 - JoeyBling bootplus QrCodeController.java qrCode redirect

Back Back to CVE browser

MEDIUM

JoeyBling bootplus QrCodeController.java qrCode redirect

Published Jan 24, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.38%

Description

A vulnerability has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d and classified as problematic. Affected by this vulnerability is the function qrCode of the file src/main/java/io/github/controller/QrCodeController.java. The manipulation of the argument text leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Affected products

Vendor JoeyBling Product Bootplus Default
n/a
- Version
  
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

JoeyBling

Bootplus

n/a

Version	Status	Constraints
	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1828
Advisory
https://github.com/JoeyBling/bootplus/issues/27
issue-trackingNot Applicable
https://github.com/JoeyBling/bootplus/issues/27#issue-2786941847
exploitissue-trackingNot Applicable
https://vuldb.com/?ctiid.293233
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.293233
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.480844
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1828		Advisory
https://github.com/JoeyBling/bootplus/issues/27		issue-trackingNot Applicable
https://github.com/JoeyBling/bootplus/issues/27#issue-2786941847		exploitissue-trackingNot Applicable
https://vuldb.com/?ctiid.293233		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.293233		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.480844		third-party-advisoryThird Party AdvisoryVDB Entry