CVE-2025-8752

CRITIQUE 9.8CVE-2025-8752 · Published 09/08/2025 · updated 17/06/2026

En bref

CVE-2025-8752 est une vulnérabilité CRITIQUE (CVSS 9.8).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.3%, plus élevée que 91.2% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was found in wangzhixuan spring-shiro-training up to 94812c1fd8f7fe796c931f4984ff1aa0671ab562. It has been declared as critical. This vulnerability affects unknown code of the file /role/add. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

References

gitee.com/wangzhixuan/spring-shiro-training/issues/ICP2ME · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free