CVE-2025-25590

Description

References

• gitee.com/r1bbit/yimioa/issues/IBI7XH · Exploit

yimioa 的其他漏洞

• CVE-2025-25586中危 4.2yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml.
• CVE-2025-25582中危 6.1yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.x…
• CVE-2025-25585高危 7.3Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorized attackers to arbit…
• CVE-2025-25580中危 6.1yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml.
• CVE-2025-1227高危 8.8A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file co…