CVE-2025-25580

概要

参考情報

• gitee.com/r1bbit/yimioa/issues/IBI6XT · Exploit

yimioa のその他の脆弱性

• CVE-2025-25586中 4.2yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml.
• CVE-2025-25582中 6.1yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.x…
• CVE-2025-25590中 6.1yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml.
• CVE-2025-25585高 7.3Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbit…
• CVE-2025-1227高 8.8A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file co…