CVE-2025-12305: falha de média gravidade em quequnlong shiyi-blog
quequnlong shiyi-blog Job SysJobController.java deserialization
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.5%
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
quequnlong · shiyi-blogCVEs relacionadas — quequnlong shiyi-blog
No mesmo produto, das mais perigosas para as menos.
CVE-2025-5512MEDIUMquequnlong shiyi-blog Administrator Backend verifyPassword improper authenticationEPSS 0.8%CVE-2025-5511MEDIUMquequnlong shiyi-blog photos improper authorizationEPSS 0.8%CVE-2025-5509MEDIUMquequnlong shiyi-blog upload path traversalEPSS 0.8%CVE-2025-5510MEDIUMquequnlong shiyi-blog optimize server-side request forgeryEPSS 0.5%CVE-2026-90527MEDIUMquequnlong shiyi-blog Add Message API index.vue cross site scriptingEPSS 0.5%CVE-2025-5513MEDIUMquequnlong shiyi-blog add cross site scriptingEPSS 0.4%