GCVE - cpe:2.3:a:aitangbao:springboot-manager:3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:aitangbao:springboot-manager:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

Vendor	Aitangbao (`d33fcc33-1d1c-537d-a8e7-28d6a2ef8628`)
Product	Springboot Manager (`cfc532b4-6632-5a57-a505-76b16808019b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gitee/zwens/springboot-manager`	purl2cpe	2026-06-01 10:13:18.771589
`pkg:github/aitangbao/springboot-manager`	purl2cpe	2026-06-01 10:13:18.771591

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-2211`	vulnerable	2026-06-08 07:16:56.399268	aitangbao springboot-manager add cross site scripting LOW (2.4) A vulnerability was found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sysDictDetail/add. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-11T22:00:13.351Z Updated: 2025-03-12T13:46:59.731Z Open on db.gcve.eu Reference links https://vuldb.com/?id.299282 https://vuldb.com/?ctiid.299282 https://vuldb.com/?submit.511741 https://github.com/uglory-gll/javasec/blob/main/spring-manage.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2210`	vulnerable	2026-06-08 07:16:56.398754	aitangbao springboot-manager add cross site scripting LOW (2.4) A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /sysJob/add. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-11T22:00:12.027Z Updated: 2025-03-12T13:51:09.150Z Open on db.gcve.eu Reference links https://vuldb.com/?id.299281 https://vuldb.com/?ctiid.299281 https://vuldb.com/?submit.511740 https://github.com/uglory-gll/javasec/blob/main/spring-manage.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2209`	vulnerable	2026-06-08 07:16:56.398262	aitangbao springboot-manager add cross site scripting LOW (2.4) A vulnerability, which was classified as problematic, was found in aitangbao springboot-manager 3.0. Affected is an unknown function of the file /sysDict/add. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-11T21:31:04.590Z Updated: 2025-03-12T14:05:27.195Z Open on db.gcve.eu Reference links https://vuldb.com/?id.299280 https://vuldb.com/?ctiid.299280 https://vuldb.com/?submit.511739 https://github.com/uglory-gll/javasec/blob/main/spring-manage.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2208`	vulnerable	2026-06-08 07:16:56.397771	aitangbao springboot-manager Filename upload cross site scripting LOW (2.4) A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue affects some unknown processing of the file /sysFiles/upload of the component Filename Handler. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-11T20:31:04.351Z Updated: 2025-03-11T20:38:03.451Z Open on db.gcve.eu Reference links https://vuldb.com/?id.299279 https://vuldb.com/?ctiid.299279 https://vuldb.com/?submit.511738 https://github.com/uglory-gll/javasec/blob/main/spring-manage.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2207`	vulnerable	2026-06-08 07:16:56.397230	aitangbao springboot-manager dept cross site scripting LOW (2.4) A vulnerability classified as problematic was found in aitangbao springboot-manager 3.0. This vulnerability affects unknown code of the file /sys/dept. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-03-11T20:00:10.810Z Updated: 2025-03-11T20:06:40.141Z Open on db.gcve.eu Reference links https://vuldb.com/?id.299278 https://vuldb.com/?ctiid.299278 https://vuldb.com/?submit.511737 https://github.com/uglory-gll/javasec/blob/main/spring-manage.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2206`	vulnerable	2026-06-08 07:16:56.396732	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.