Approved changes feed: RSS · Atom

cpe:2.3:a:springbootmovie_project:springbootmovie:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpringbootmovie Project (544bc14a-7026-5ca1-80de-9df6cc7d6a83)
ProductSpringbootmovie (d2fb3c6b-3097-57a4-be25-f0142bb371f6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/lkmc2/springbootmovie purl2cpe 2026-06-01 10:14:35.531537

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29001 vulnerable 2026-06-08 05:42:46.304607 Details available
In SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in arbitrary file upload vulnerability
Published: 2022-05-03T17:43:36.000Z
Updated: 2024-08-03T06:10:58.459Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28588 vulnerable 2026-06-08 05:42:44.628123 Details available
In SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are no filtering parameters, resulting in stored XSS.
Published: 2022-05-03T17:42:00.000Z
Updated: 2024-08-03T05:56:16.072Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.