Hope-Boot
Java-Aodeng · 2 CVEs
CVE-2025-6552
MEDIUM
java-aodeng Hope-Boot Login WebController.java doLogin redirect
Jun 24, 2025
CVE-2025-6551
MEDIUM
java-aodeng Hope-Boot WebController.java login cross site scripting
Jun 24, 2025
CVE-2025-45611
CRITICAL
Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via…
May 5, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-6552 | java-aodeng Hope-Boot Login WebController.java doLogin redirect | MEDIUM | 0.41% | Jun 24, 2025 |
| CVE-2025-6551 | java-aodeng Hope-Boot WebController.java login cross site scripting | MEDIUM | 0.45% | Jun 24, 2025 |
| CVE-2025-45611 | Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request. | CRITICAL | 0.53% | May 5, 2025 |
Showing 1 to 2 of 2 CVEs